day78:luffy:前端对于token的认证&滑动验证码的实现

 users/views.py

from django.shortcuts  render

 ObtainJSONWebToken

from lyapi.apps.users.serializers  CustomeSerializer


class CustomLoginView(ObtainJSONWebToken):
    serializer_class = CustomeSerializer

 users/serializers.py


from rest_framework_jwt.serializers  JSONWebTokenSerializer
from rest_framework  serializers
from rest_framework_jwt.compat  get_username_field,PasswordField
from django.utils.translation  ugettext as _
from django.contrib.auth  authenticate,get_user_model
from rest_framework_jwt.settings  api_settings
User = get_user_model()
jwt_payload_handler = api_settings.JWT_PAYLOAD_HANDLER
jwt_encode_handler = api_settings.JWT_ENCODE_HANDLER
jwt_decode_handler = api_settings.JWT_DECODE_HANDLER
jwt_get_username_from_payload = api_settings.JWT_PAYLOAD_GET_USERNAME_HANDLER

 CustomeSerializer(JSONWebTokenSerializer):

    def __init__(self,*args,**kwargs):
        """
        Dynamically add the USERNAME_FIELD to self.fields.
        """
        super(JSONWebTokenSerializer,self).__init__(*args,1)">kwargs)
        
         重写jwt自带的序列化器，在原来的基础上添加ticket和randstr
        self.fields[self.username_field] = serializers.CharField()
        self.fields[password'] = PasswordField(write_only=True)
        self.fields[ticket'] = serializers.CharField(write_only=randstrTrue)

     全局钩子函数
    def validate(self,attrs):
        credentials = {
            self.username_field: attrs.get(self.username_field),1)">': attrs.get(if all(credentials.values()):

            user = authenticate(self.context[request'],**credentials)   self.context['request']当前请求的request对象

             user:
                if not user.is_active:
                    msg = _(User account is disabled.)
                    raise serializers.ValidationError(msg)

                payload = jwt_payload_handler(user)

                return {
                    token: jwt_encode_handler(payload),1)">user: user
                }
            :
                msg = _(Unable to log in with provided credentials.)
                 serializers.ValidationError(msg)
        :
            msg = _(Must include "{username_field}" and "password".)
            msg = msg.format(username_field=self.username_field)
            raise serializers.ValidationError(msg)

 users/utils.py

 CustomeModelBackend(ModelBackend):
    '''
        '
        'ticket': attrs.get('ticket'),'randstr': attrs.get('randstr'),1)">'''
    def authenticate(self,request,username=None,password=None,1)">kwargs):
        try:
            user_obj = get_user_obj(username)
            ticket = kwargs.get()
            userip = request.META[REMOTE_ADDR]
            randstr = kwargs.get()
          
            params = {  腾讯防水墙需要的一些参数
                "aid": settings.FSQ.get(AppSecretKeyTicket": ticket,1)">Randstr: randstr,1)">UserIP: userip
            }
            
            params = urlencode(params).encode()  转换成bytes类型
            url = settings.FSQ.get(URL)

            f = urlopen(url,params)  发送请求,将数据发送出去，并返回滑动是否成功数据

            content = f.read()  获取数据
            res = json.loads(content)  json反序列化
            print(res)   {'response': '1','evil_level': '0','err_msg': 'OK'}
            
            if res.get(response') != 1':  如果滑动失败
                 None

            if user_obj:  如果用户名存在
                if user_obj.check_password(password):  如果密码正确
                    return user_obj  返回用户名对象

            else:  如果用户名或密码错误
                 None
        except Exception:
            logger.error(验证过程代码有误，请联系管理员)
            return None