天池像两个鸡蛋融合在一起，上面大雾迷蒙，更添加了几分神秘的色彩。而且天池在长白山的最高点，所以海拔很高，就像耸入云端似的，都是大雾，所以被称为天池。旁边还有火山，火山的顶上灰蒙蒙的，全都被火山灰覆盖了。那里还有很多火山石，有的像狮子，有的像大象，有的像绵羊……数也数不清。
这篇文章主要介绍了Django rstful登陆认证并检查session是否过期代码实例，下面我们可以来一起学习一下。
一：restful用户视图
#!/usr/bin/env python
# -*- coding:UTF-8 -*-
# Author:Leslie-x
from users import models
from rest_framework.decorators import action
from rest_framework.response import Response
from rest_framework import viewsets
from rest_framework import serializers
from django.contrib.auth import authenticate, login, logout
class UserSerializer(serializers.ModelSerializer):
class Meta:
model = models.User
exclude = ('password',)
class UserViewSet(viewsets.ReadOnlyModelViewSet):
serializer_class = UserSerializer
queryset = User.objects.all()
authentication_classes = (UserAuthentication,)
@action(detail=False, methods=['post'])
def register(self, request, *args, **kwargs):
username = request.data.get("username")
queryset = User.objects.filter(username=username)
if queryset.exists():
raise exceptions.PermissionDenied('该账号已经被注册')
user = User.objects.create_user(**request.data)
UserProfile.objects.create(user=user, nickname=user.username)
data = self.get_serializer(user).data
return Response(data)
@action(detail=False, methods=['post'])
def login(self, request, *args, **kwargs):
username = request.data.get("username")
password = request.data.get("password")
user = authenticate(username=username, password=password)
if not user:
raise exceptions.PermissionDenied('用户名或密码错误')
auth_id = request.session.get('_auth_user_id')
if auth_id != str(user.pk):
logout(request)
login(request, user)
data = self.get_serializer(user).data
data['session_key'] = request.session.session_key
return Response(data)
@action(detail=False, methods=['post'])
def logout(self, request, *args, **kwargs):
logout(request)
return Response()
二：检查session是否过期
from rest_framework.authentication import SessionAuthentication
from rest_framework.request import Request
from django.contrib.sessions.models import Session
from rest_framework import exceptions
import arrow
class CustomAuth(SessionAuthentication):
def check_session(self, request):
session_key = request.session.session_key
queryset = Session.objects.filter(session_key=session_key)
if not queryset.exists():
raise exceptions.PermissionDenied('非法用户，拒绝访问')
expire_date = queryset.first().expire_date
now = arrow.now().format('YYYY-MM-DD HH:mm:ss')
if not arrow.get(now) < arrow.get(expire_date):
raise exceptions.PermissionDenied('session expired')
def authenticate(self, request: Request):
ret = super().authenticate(request)
self.check_session(request)
return ret
以上就是Django rstful登陆认证并检查session是否过期代码实例。人生如潮，有得意也总有失意，花开花落，涨退更迭，人生苦短，何必怨天，多想想身边的人对自己的帮助，多记得身边的人对自己的好，用感恩的心去面对帮过你的人，用欣赏的眼光去发现身边每一个人的优点，少去评价他人的不足，人生处处是胜境，全在心境的不同。更多关于Django rstful登陆认证并检查session是否过期代码实例请关注haodaima.com其它相关文章！
