Django框架中的用户认证的实现

jieforest

password_reset_confirm(request[, uidb36, token, template_name, token_generator, set_password_form,post_reset_redirect])
Presents a form for entering a new password.

URL name: password_reset_confirm

Optional arguments:

uidb36: The user's id encoded in base 36. Defaults to None.

token: Token to check that the password is valid. Defaults to None.

template_name: The full name of a template to display the confirm password view. Default value is registration/password_reset_confirm.html.

token_generator: Instance of the class to check the password. This will default to default_token_generator, it's an instance of django.contrib.auth.tokens.PasswordResetTokenGenerator.

set_password_form: Form that will be used to set the password. Defaults to SetPasswordForm

post_reset_redirect: URL to redirect after the password reset done. Defaults to None.

jieforest

Template context:

form: The form (see set_password_form above) for setting the new user's password.

validlink: Boolean, True if the link (combination of uidb36 and token) is valid or unused yet.

password_reset_complete(request[, template_name])

Presents a view which informs the user that the password has been successfully changed.

URL name: password_reset_complete

Optional arguments:

template_name: The full name of a template to display the view. Defaults to registration/password_reset_complete.html.

Helper functions

jieforest

redirect_to_login(next[, login_url, redirect_field_name])

Redirects to the login page, and then back to another URL after a successful login.

Required arguments:

next: The URL to redirect to after a successful login.

Optional arguments:

login_url: The URL of the login page to redirect to. Defaults to settings.LOGIN_URL if not supplied.

redirect_field_name: The name of a GET field containing the URL to redirect to after log out. Overrides next if the given GETparameter is passed.

Built-in forms

If you don't want to use the built-in views, but want the convenience of not having to write forms for this functionality, the authentication system provides several built-in forms located in django.contrib.auth.forms:

jieforest

class AdminPasswordChangeForm
A form used in the admin interface to change a user's password.

class AuthenticationForm
A form for logging a user in.

class PasswordChangeForm
A form for allowing a user to change their password.

class PasswordResetForm
A form for generating and emailing a one-time use link to reset a user's password.

class SetPasswordForm
A form that lets a user change his/her password without entering the old password.

class UserChangeForm
A form used in the admin interface to change a user's information and permissions.

class UserCreationForm
A form for creating a new user.

jieforest

Limiting access to logged-in users that pass a test

To limit access based on certain permissions or some other test, you'd do essentially the same thing as described in the previous section.

The simple way is to run your test on request.user in the view directly. For example, this view checks to make sure the user is logged in and has the permission polls.can_vote:

1. def my_view(request):
   
2.     if not request.user.has_perm('polls.can_vote'):
   
3.         return HttpResponse("You can't vote in this poll.")
   
4.     # ...

复制代码