需要 Django Rest Framework JWT 登录

Question

I am using django rest framework jwt authentication. I get token successfully and can add token to cookie. But when i try to reach views that requires login, JWT authentication is not working. Always redirects to login.html.

Http request header:

Authorization: JWT eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjozLCJ1c2VybmFtZSI6ImFkbWluIiwiZXhwIjoxNTA1NjU3NDgwLCJlbWFpbCI6ImFkbWluQGdtYWlsLmNvbSJ9.Ro507cIEisRle_iKgH4dm3-tSbrrsaCUYtP2CIK9jLM

Cookie: token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjozLCJ1c2VybmFtZSI6ImFkbWluIiwiZXhwIjoxNTA1NjU3NDgwLCJlbWFpbCI6ImFkbWluQGdtYWlsLmNvbSJ9.Ro507cIEisRle_iKgH4dm3-tSbrrsaCUYtP2CIK9jLM

class SystemUserView(View):
    @method_decorator(login_required)
    def get(self, request, user_id):
        users = list(User.objects.all().values('email', 'id', 'username'))
        return HttpResponse(HttpResponse(json.dumps(users), content_type="application/json"))

urls:

from django.conf.urls import url
from . import views
from .views import SystemUserView, UserAuthenticationView
from rest_framework_jwt.views import obtain_jwt_token, refresh_jwt_token, verify_jwt_token
urlpatterns = [
    url(r'^$', views.index, name="index"),
    url(r'^login/?$', UserAuthenticationView.login, name="index"),
    url(r'^user/(?P<user_id>[0-9]+)/$', SystemUserView.as_view(), name='user'),
    url(r'^api-token-auth/', obtain_jwt_token),
    url(r'^api-token-refresh/', refresh_jwt_token),
    url(r'^api-token-verify/', verify_jwt_token),
]

Django version :(1, 11, 5, 'final', 0)

Python 3.6.2

https://jpadilla.github.io/django-rest-framework-jwt

Answer 1

 class SystemUserView(View):

Looks like you are importing a Django view, not a DRF APIView . DRF and Django use different authentication systems. If you are authenticated with JWT towards DRF, Django Views will still redirect you to the login page.

Here is an example of a DRF view using normal Token Authentication. I haven't tested it and you will have to adapt it for JWT, but it should lead you onto the right path.

from rest_framework import authentication, permissions
from django.contrib.auth.models import User

class ListUsers(APIView):
    """
    View to list all users in the system.

    * Requires token authentication.
    """
    authentication_classes = (authentication.TokenAuthentication,)
    permission_classes = (permissions.IsAuthenticated,)

    def get(self, request, user_id):
        """
        Return a list of all users.
        """
        users = list(User.objects.all().values('email', 'id', 'username'))
        return Response(users)

Also, please consider using a DRF serializer for converting the user object to json.