Django Rest框架序列化器和视图

我有一个扩展AbstractBaseUser的帐户模型.视图集如下所示：

class AccountViewSet(viewsets.ModelViewSet):
    lookup_field = 'username'
    queryset = Account.objects.all()
    serializer_class = AccountSerializer

    def get_permissions(self):
        if self.request.method in permissions.SAFE_METHODS:
            return (permissions.AllowAny(),TokenHasReadWriteScope())

        if self.request.method == 'POST':
            return (permissions.AllowAny(),TokenHasReadWriteScope())

        return (permissions.IsAuthenticated(),IsAccountOwner(),TokenHasReadWriteScope())

    def create(self,request):
        serializer = self.serializer_class(data=request.data)

        if serializer.is_valid():
            Account.objects.create_user(**serializer.validated_data)

            return Response(serializer.validated_data,status=status.HTTP_201_CREATED)
        return Response({
            'status': 'Bad request','message': 'Account could not be created with received data.'
        },status=status.HTTP_400_BAD_REQUEST)

像这样的序列化器：

class AccountSerializer(serializers.ModelSerializer):
    password = serializers.CharField(write_only=True,required=False)
    confirm_password = serializers.CharField(write_only=True,required=False)

    class Meta:
        model = Account
        fields = ('id','email','username','created_at','updated_at','first_name','last_name','tagline','password','confirm_password',)
        read_only_fields = ('created_at',)

    def create(self,validated_data):
        return Account.objects.create(**validated_data)

    def update(self,instance,validated_data):
        instance.username = validated_data.get('username',instance.username)

        instance.save()

        password = validated_data.get('password',None)
        confirm_password = validated_data.get('confirm_password',None)

        if password and confirm_password:
            instance.set_password(password)
            instance.save()

            update_session_auth_hash(self.context.get('request'),instance)

        return instance

def validate(self,data):
        if data['password'] and data['confirm_password'] and data['password'] == data['confirm_password']:
            try:
                validate_password(data['password'],user=data['username']):

                return data
            except ValidationError:
                raise serializers.ValidationError("Password is not valid.")
        raise serializers.ValidationError("Passwords do not match.")

在视图的create方法中,它检查序列化程序是否有效,然后保存并根据结果返回响应.我的第一个问题是什么时候调用序列化器create()方法？对我来说,似乎通过在视图的create()方法中调用create_user(模型方法)来完全绕过该方法.它会被调用吗？拥有它有什么意义？

其次,我无法从更新方法返回状态代码,实例保存在序列化程序中.如果验证失败,串行器update()中的代码是否可以工作？

这是我到目前为止：

def update(self,request,pk=None):
        serializer = self.serializer_class(data=request.data)

        if serializer.is_valid():
            << what goes here??? >>

            return Response(serializer.validated_data,status=status.HTTP_200_OK)
        except serializers.ValidationError as e:
        return Response({
            'status': 'Bad request','message': str(e)    
        },status=status.HTTP_400_BAD_REQUEST)

        return Response({
            'status': 'Bad request','message': 'Account could not be updated with received data.'
        },status=status.HTTP_400_BAD_REQUEST)

我迫切需要一些澄清.我不确定如何通过视图/序列化方法请求流程,我不知道如何在序列化程序中保存实例并决定在视图中同时返回哪个响应.

编辑：

我删除了创建和更新方法并修复了AccountViewSet的get_permissions,并添加了用户名验证以按照您的建议进行验证.我还更新了序列化器的创建和更新方法,以下是新版本：

def create(self,validated_data):
    instance = super(AccountSerializer,self).create(validated_data)
    instance.set_password(validated_data['password'])
    instance.save()
    return instance

def update(self,validated_data):
    instance.username = validated_data.get('username',instance.username)

    password = validated_data.get('password',None)
    confirm_password = validated_data.get('confirm_password',None)

    if password and confirm_password:
        instance.set_password(password)
        instance.save()
        update_session_auth_hash(self.context.get('request'),instance)
    else:
        instance.save()

    return instance

我唯一的问题是有必要在创建后调用set_password吗？不创建为新用户设置密码？是否可以在视图中创建和更新代码？ serializer.save()在没有视图代码的情况下被调用的位置以及序列化程序验证何时运行而不调用serializer.is_valid()？