Django身份验证

Question

Having for instance http://mywebsite.com?increase_counter=true/

I want to let someone increase counter on my database with a GET request but only when he is authenticated. How can someone be authenticated when coding in something external? eg shell or API.

Should I consider using tokens in GET request or is there an easy way to firstly authenticate someone with a simple request POST or GET and then execute url? EG I want to authenticate myself to django app with a simple shell. How to do it? Maybe another way?

Answer 1

I think your easiest approach is to include some sort of authentication tokens with the GET itself. The problem is that in order for you to be able to use other forms of authentication, you'll need to actually package the data (HTTP Authentication requires an authentication header, traditional authentication requires a cookie header).

If all you want to do is create a simple point-of-entry, then GET parameters are no more complicated than concatenating some strings.