自定義Django Rest JWT登錄

Question

我正在嘗試為django rest api身份驗證編寫自定義jwt登錄視圖。 但這是行不通的，我也不知道為什么。你能幫我修復這段代碼或舉一些例子嗎？ 提前致謝。

我的序列化器：

class LoginSerializer(serializers.Serializer):
    token = serializers.CharField(max_length=256)
    username = serializers.CharField(max_length=128)
    password = serializers.CharField(write_only=True,
                                     required=True,
                                     style={
                                         'input_type': 'password',
                                         'placeholder': 'password'
                                     })

我的觀點：

from .serializers import LoginSerializer

class UserLogin(APIView):
    """
        POST login/
    """
    permission_classes = (permissions.AllowAny,)
    queryset = User.objects.all()

    def post(self, request, *args, **kwargs):
        username = request.data.get('username', '')
        password = request.data.get('password', '')
        user = auth.authenticate(request, username=username, password=password)
        if user is not None:
            auth.login(request, user)
            serializer = LoginSerializer(self.queryset,
                data={
                    'token': jwt_encode_handler(jwt_payload_handler(user)),
                    'username': username,
                    'password': password,
                }
            )
            if serializer.is_valid():
                return Response(serializer.data)
        return Response(status=status.HTTP_401_UNAUTHORIZED)

Answer 1

您可以簡單地將令牌轉儲到json中，甚至不使用序列化程序。 您在此處提供數據和格式，因此您無需驗證任何用戶輸入。

class UserLogin(APIView):
    """
        POST login/
    """
    permission_classes = (permissions.AllowAny,)
    queryset = User.objects.all()

    def post(self, request, *args, **kwargs):
        username = request.data.get('username', '')
        password = request.data.get('password', '')
        user = auth.authenticate(request, username=username, password=password)
        if user is not None:
            auth.login(request, user)
            return Response({'token': jwt_encode_handler(jwt_payload_handler(user)),
                    'username': user.username})

        return Response(status=status.HTTP_401_UNAUTHORIZED)