Django中多个站点的用户

Question

I am trying to get multiple sites to use the same database and code but in a way which forces each user to have their own login to each site.

I have seen a few suggestions as to how to make this work but I'm not sure which way to go.

I am using the Sites Framework, using the subdomain to identify the current site so I'm not using SITE_ID at all.

1. Use the sites framework - This answer ( https://stackoverflow.com/a/1405902/1180442 ) suggests using the sites framework to do it, but I'm having trouble with the get_user() method, as it doesn't have access to the request and that's where my site info is stored.
2. Use separate databases for users - I'm really not sure about this one but I think it might cause bigger problems down the line.
3. Change to using SITE_ID - I want to try and avoid this if possible as it will mean having to run many different instances of my app, one for each site, which uses it's own settings.py. This will quickly turn into a nightmare, I think.
4. Permissions - I'm wondering if this should be something that I get the permissions framework to use? So one set of users for all sites but each user can have permissions to see each site, as long as they've registered with that site?

Can anyone help with this?

I quite like the idea of number 1 but I just need to get the request in the get_user() method so I can do this

def get_user(self, user_id):
        try:
            # I can't do this because there is no request available here
            return User.objects.get(pk=user_id, site=request.site)
        except User.DoesNotExist:
            return None

to prevent people logged in to one site being able to log into another using the same session.

Answer 1

How I actually do it, not for users but for common databases, Is to design a main, hidden app with a REST API architecture. My other apps, naturally have their own DB and exchange their data via batch or stream process depending on the need. I use django-rest-framework.

For your case what I would do is that whenever a user makes a Log In request I would send it via HTTPS to my main database and get it authenticated in my main app. Whenever I would need to validate the user status I would simply make a get request to the main app.

This architecture is not that different from the one that many mobile apps have.

I hope it helps.