當(dāng)前位置：
首頁(yè) >
Django通过中间件实现登录验证demo
發(fā)布時(shí)間：2023/12/10
35
豆豆
生活随笔
收集整理的這篇文章主要介紹了
Django通过中间件实现登录验证demo
小編覺(jué)得挺不錯(cuò)的,現(xiàn)在分享給大家,幫大家做個(gè)參考.
前提：中間件版的登錄驗(yàn)證需要依靠session，所以數(shù)據(jù)庫(kù)中要有django_session表。
1 from django.conf.urls import url 2 from django.contrib import admin 3 from app01 import views 4 5 urlpatterns = [ 6 url(r'^admin/', admin.site.urls), 7 url(r'^login/$', views.login, name='login'), 8 url(r'^index/$', views.index, name='index'), 9 url(r'^home/$', views.home, name='home'), 10 ] urls.py 1 from django.shortcuts import render, HttpResponse, redirect 2 3 4 def index(request): 5 return HttpResponse('this is index') 6 7 8 def home(request): 9 return HttpResponse('this is home') 10 11 12 def login(request): 13 if request.method == "POST": 14 user = request.POST.get("user") 15 pwd = request.POST.get("pwd") 16 17 if user == "jason" and pwd == "jason666": 18 # 設(shè)置session 19 request.session["user"] = user 20 # 獲取跳到登陸頁(yè)面之前的URL 21 next_url = request.GET.get("next") 22 # 如果有，就跳轉(zhuǎn)回登陸之前的URL 23 if next_url: 24 return redirect(next_url) 25 # 否則默認(rèn)跳轉(zhuǎn)到index頁(yè)面 26 else: 27 return redirect("/index/") 28 return render(request, "login.html") views.py 1 <!DOCTYPE html> 2 <html lang="en"> 3 <head> 4 <meta charset="UTF-8"> 5 <title>登錄頁(yè)面</title> 6 </head> 7 <body> 8 <form action="{% url 'login' %}" method="post"> 9 {% csrf_token %} 10 <p> 11 <label for="user">用戶名：</label> 12 <input type="text" name="user" id="user"> 13 </p> 14 <p> 15 <label for="pwd">密 碼：</label> 16 <input type="text" name="pwd" id="pwd"> 17 </p> 18 <input type="submit" value="登錄"> 19 </form> 20 </body> 21 </html> login.html 1 from django.utils.deprecation import MiddlewareMixin 2 3 4 class AuthMD(MiddlewareMixin): 5 white_list = ['/login/', ] # 白名單 6 black_list = ['/black/', ] # 黑名單 7 8 def process_request(self, request): 9 from django.shortcuts import redirect, HttpResponse 10 11 next_url = request.path_info 12 print(request.path_info, request.get_full_path()) 13 # 黑名單的網(wǎng)址限制訪問(wèn) 14 if next_url in self.black_list: 15 return HttpResponse('This is an illegal URL') 16 # 白名單的網(wǎng)址或者登陸用戶不做限制 17 elif next_url in self.white_list or request.session.get("user"): 18 return 19 else: 20 return redirect("/login/?next={}".format(next_url)) mymiddlewares.py 1 MIDDLEWARE = [ 2 'django.middleware.security.SecurityMiddleware', 3 'django.contrib.sessions.middleware.SessionMiddleware', 4 'django.middleware.common.CommonMiddleware', 5 'django.middleware.csrf.CsrfViewMiddleware', 6 'django.contrib.auth.middleware.AuthenticationMiddleware', 7 'django.contrib.messages.middleware.MessageMiddleware', 8 'django.middleware.clickjacking.XFrameOptionsMiddleware', 9 'app01.mymiddlewares.AuthMD' 10 ] settings注冊(cè)中間件?
AuthMD中間件注冊(cè)后，所有的請(qǐng)求都要走AuthMD的process_request方法。
如果URL在黑名單中，則返回This is an illegal URL的字符串；
訪問(wèn)的URL在白名單內(nèi)或者session中有user用戶名，則不做阻攔走正常流程；
正常的URL但是需要登錄后訪問(wèn)，讓瀏覽器跳轉(zhuǎn)到登錄頁(yè)面。
注：AuthMD中間件中需要session，所以AuthMD注冊(cè)的位置要在session中間的下方。
轉(zhuǎn)載于:https://www.cnblogs.com/changwentao/p/9669691.html
總結(jié)
以上是生活随笔為你收集整理的Django通过中间件实现登录验证demo的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。
- 上一篇： kafka副本数据同步策略
- 下一篇： 《HBase权威指南》一3.4 行锁