使用用户名和密码登录时未提供身份验证凭据

Question

I have a such misunderstanding with my django

I make a login from DJANGO built in view for testing, lofin is successful

But from postman or any other place i get an ERROR Authentication credentials were not provided

CAN ANYBODY PLEASE EXPLAIN WHAT IS WRONG!!!

If i did not provide full explanation, please inform me, and i will add

This is settings.py

    DEBUG = True

ALLOWED_HOSTS = ['127.0.0.1', 'localhost']


# Application definition

INSTALLED_APPS = [
    "django.contrib.admin",
    "django.contrib.auth",
    "django.contrib.contenttypes",
    "django.contrib.sessions",
    "django.contrib.messages",
    "django.contrib.staticfiles",
    "tsundoku",
    'rest_framework',
    'rest_framework.authtoken',
    'corsheaders'
]

MIDDLEWARE = [
    'corsheaders.middleware.CorsMiddleware',
    "django.middleware.security.SecurityMiddleware",
    "django.contrib.sessions.middleware.SessionMiddleware",
    "django.middleware.common.CommonMiddleware",
    "django.middleware.csrf.CsrfViewMiddleware",
    "django.contrib.auth.middleware.AuthenticationMiddleware",
    "django.contrib.messages.middleware.MessageMiddleware",
    "django.middleware.clickjacking.XFrameOptionsMiddleware",
]

CORS_ALLOWED_ORIGINS = [
    "http://localhost:3000",
]

ROOT_URLCONF = "backend.urls"

TEMPLATES = [
    {
        "BACKEND": "django.template.backends.django.DjangoTemplates",
        "DIRS": [],
        "APP_DIRS": True,
        "OPTIONS": {
            "context_processors": [
                "django.template.context_processors.debug",
                "django.template.context_processors.request",
                "django.contrib.auth.context_processors.auth",
                "django.contrib.messages.context_processors.messages",
            ],
        },
    },
]

WSGI_APPLICATION = "backend.wsgi.application"


# Database
# https://docs.djangoproject.com/en/3.1/ref/settings/#databases

DATABASES = {
    "default": {
        "ENGINE": "django.db.backends.sqlite3",
        "NAME": BASE_DIR / "db.sqlite3",
    }
}


# Password validation
# https://docs.djangoproject.com/en/3.1/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [
    {
        "NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator",
    },
    {
        "NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
    },
    {
        "NAME": "django.contrib.auth.password_validation.CommonPasswordValidator",
    },
    {
        "NAME": "django.contrib.auth.password_validation.NumericPasswordValidator",
    },
]


# Internationalization
# https://docs.djangoproject.com/en/3.1/topics/i18n/

LANGUAGE_CODE = "en-us"

TIME_ZONE = "UTC"

USE_I18N = True

USE_L10N = True

USE_TZ = True


# Static files (CSS, JavaScript, Images)
# https://docs.djangoproject.com/en/3.1/howto/static-files/

STATIC_URL = '/static/'
# MEDIA_URL this is for displaying image in browser ex. http://localhost:8000/images/d14f96e4b0e94973b151ea8097e28c01.jpg
MEDIA_URL = '/images/'
STATICFILES_DIRS = (
    os.path.join(BASE_DIR, "static"),
)
# MEDIA_ROOT this is the directory where the images will be saved
MEDIA_ROOT = os.path.join(
    BASE_DIR, f'tsundoku/static/images/')
STATIC_ROOT = os.path.join(os.path.dirname(BASE_DIR), "static/")


REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': (
        # 'rest_framework_simplejwt.authentication.JWTAuthentication',
        'rest_framework.authentication.BasicAuthentication',
        'rest_framework.authentication.SessionAuthentication',
        'rest_framework.authentication.TokenAuthentication',
        # 'rest_framework_jwt.authentication.JSONWebTokenAuthentication',
    ),
    'DEFAUlt_filter_classes': (
        'django_filters.rest_framework.DjangoFilterBackend',
    ),
    'DEFAULT_PARSER_CLASSES': (
        'rest_framework.parsers.JSONParser',
    ),
    'DEFAULT_PERMISSION_CLASSES': (
        'rest_framework.permissions.IsAuthenticated',
    )
}

Ptoject usrl.py

    from django.contrib import admin
from django.conf import settings
from django.urls import path, include
from django.conf.urls.static import static
from rest_framework.routers import DefaultRouter
from rest_framework_simplejwt import views as jwt_views

print('project -> urls.py initialised')

router = DefaultRouter()

urlpatterns = [
    path('admin/', admin.site.urls),
    path('', include('tsundoku.urls')),
    path('api/token/', jwt_views.TokenObtainPairView.as_view(),
         name='token_obtain_pair'),
    path('api/token/refresh/', jwt_views.TokenRefreshView.as_view(),
         name='token_refresh'),

]

if settings.DEBUG:
    urlpatterns += static(settings.MEDIA_URL,
                          document_root=settings.MEDIA_ROOT)

App urls.py

    from django.urls import include, path, re_path
from rest_framework import routers
from rest_framework.authtoken.views import obtain_auth_token
from . import views
from rest_framework.urlpatterns import format_suffix_patterns
import django

print('tsundoku -> urls.py initialised')


# Wire up our API using automatic URL routing.
# Additionally, we include login URLs for the browsable API.
urlpatterns = [
    re_path(r'^books/$', views.BooksList.as_view(), name='all-books'),
    re_path(r'^books/?(?P<active>[0-1])/$',
            views.BooksList.as_view(), name='all-active-books'),
    path('book/<int:pk>/',
         views.books_details, name='single-book'),
    path('userbook/', views.userbook_list, name='userbook'),
    path('banner/', views.banners, name='banner'),
    # re_path(
    # r'login/(?P<username>[^[^-\.][\w-\.]+@([\w-]+\.)+[\w-]{2,4}])/(?P<password>[.]{1,})$', views.Login, name='Login'),
    path('register/', views.RegisterView.as_view(), name='register'),
    path('login/', views.LoginView.as_view(), name='login'),

    path('hello/', views.TestAuth.as_view(), name='hello'),
    path('accounts/', include('django.contrib.auth.urls')),
    # To get a token by username and pwd
    path('api-token-auth/', obtain_auth_token, name='api-token-auth'),
]

urlpatterns = format_suffix_patterns(urlpatterns)

Serializer

class LoginSerializer(serializers.Serializer):
    print('serializers.py -> LoginSerializer')

    email = serializers.CharField(max_length=50)
    password = serializers.CharField(max_length=255)

    def printa(self, data):
        print('login')

View

class LoginView(APIView):
    print('login_register-view.py -> Login')

    def post(self, request, *args, **kwargs):
        print(request)
        serializer = LoginSerializer(data=request.data)
        if serializer.is_valid():
            """
            User may login with mail and username, 
            so first we check it and throw error if not user found in DB
            """
            username = serializer.data['email']
            if '@' in serializer.data['email']:
                try:
                    username = User.objects.get(
                        email__exact=serializer.data['email']).username
                except User.DoesNotExist:
                    username = None
            password = serializer.data['password']
            print('username', username)
            user = authenticate(
                username=username, password=password)
            print('active user: ', user)
            if user is not None:
                if not User.is_active:
                    print('user is not active')
                login(request, user)
                token, created = Token.objects.get_or_create(user=user)
                response = {'result': [{
                    'username': username,
                    'token': token.key}],
                    'success': True
                }
                return Response(response, status=status.HTTP_201_CREATED)
            err_response = {'result':
                            [{'error': 'You see this error because you entered invalid credentials or user with this credentials is not active'}],
                            'success': False
                            }
            return Response(err_response, status=status.HTTP_401_UNAUTHORIZED)
        return Response(serializer.errors, status=status.HTTP_401_UNAUTHORIZED)

Answer 1

Solved by adding permission classes

class LoginView(APIView):
    print('login_register-view.py -> Login')

    permission_classes = ()

.......

Based on this answer