Django is_authenticated和@login_required均不起作用

Question

I tried to make some pages only visible when logged in.

I tried it with:

 def backend(request):
    if request.user.is_authenticated:
        return render(request, 'web/backend-index.html')
    else:
        return redirect(reverse('web:login'))

and also with:

@login_required
   def backend(request):
   return render(request, 'web/backend-index.html')

The first code does not let me log in.

The second code does not let me log in but the url changes too: http://127.0.0.1:8000/login/?next=/backend/

If I just render the view without checking if logged in, the login is working fine and I´ll be passed to the backend page.

The whole code is on github: https://github.com/psmaster1/BrainSystems/tree/master/smarthome/web

I don't get any error messages. It's just redirecting to the login page...

Answer 1

Your login form is incorrect - that's why you never actually authenticate. It was sending POST request to incorrect endpoint and it was not rendering actual form. This is how you can render fields manually

Change it to this:

<section class="login-form">
    <div class="login-fields">
        <h3>Login</h3>
        <form method="POST">
            {% csrf_token %}

            <div class="form-group">
                {{ login_form.username }}
                <label for="{{ login_form.username.id_for_label }}" class="control-label">Username</label><i class="bar"></i>
                {{ login_form.username.errors }}
            </div>

            <div class="form-group">
                {{ login_form.password }}
                <label for="{{ login_form.password.id_for_label }}" class="control-label">Passwort</label><i class="bar"></i>
                {{ login_form.password.errors }}
            </div>

            <div class="button-container">
                <input type="submit" class="button" value="Login" />
            </div>
        </form>
        <p>Noch nicht Registriert?</p>
        <a href="{% url 'web:register' %}">Registrieren</a>
    </div>
</section>

Answer 2

Already fixed it! The Problem was the action attribute in the form tag. It causes the troubles. Just removed it from the form tag and make a redirect in the login() method. Thanks guys! :)