django.contrib.auth的其他日志記錄

Question

我想在會話哈希驗證失敗時記錄日志。 日志代碼應插入此https://github.com/django/django/blob/master/django/contrib/auth/ init .py＃L183中（如果阻止）。

我正在嘗試找出實現此目的的最佳方法。 目前看來，我將需要覆蓋整個django.contrib.auth.middleware.AuthenticationMiddleware 。

你對我有什么建議嗎？

Answer 1

為什么不復制get_user函數並將記錄器放入您想要的位置：

from django.contrib.auth import *    

def your_get_user(request):
    """
    Returns the user model instance associated with the given request session.
    If no user is retrieved an instance of `AnonymousUser` is returned.
    """
    from django.contrib.auth.models import User, AnonymousUser
    user = None
    try:
        user_id = _get_user_session_key(request)
        backend_path = request.session[BACKEND_SESSION_KEY]
    except KeyError:
        pass
    else:
        if backend_path in settings.AUTHENTICATION_BACKENDS:
            backend = load_backend(backend_path)
            user = backend.get_user(user_id)
            # Verify the session
            if ('django.contrib.auth.middleware.SessionAuthenticationMiddleware'
                    in settings.MIDDLEWARE_CLASSES and hasattr(user, 'get_session_auth_hash')):
                session_hash = request.session.get(HASH_SESSION_KEY)
                session_hash_verified = session_hash and constant_time_compare(
                    session_hash,
                    user.get_session_auth_hash()
                )
                if not session_hash_verified:
                    log = logging.getLogger("YourLog")
                    log.debug(session_hash)
                    request.session.flush()
                    user = None

    return user or AnonymousUser()

並像您想要的那樣在代碼中使用它