我正在嘗試通過電子郵件鏈接實現(xiàn)帳戶激活。我的User模型很簡單，繼承自django.contrib.auth.models.AbstractUser，所以is_active默認有字段。注冊后，使用is_active=Falseparam創(chuàng)建新用戶，我想處理案例，當用戶嘗試登錄時，即使憑據(jù)很好，也不應(yīng)該登錄，因為帳戶未激活。我正在使用 Knox 令牌身份驗證。我的序列化器：from django.contrib.auth import authenticatefrom rest_framework import serializers, exceptionsclass LoginUserSerializer(serializers.ModelSerializer): class Meta: model = UserModel fields = ('username', 'password') def validate(self, data): user = authenticate(**data) if user: if user.is_active: return user raise exceptions.AuthenticationFailed('Account is not activated') raise exceptions.AuthenticationFailed()并查看：from django.contrib.auth import loginfrom rest_framework.permissions import AllowAnyfrom rest_framework.authtoken.serializers import AuthTokenSerializerfrom knox.views import LoginViewfrom .serializers import LoginUserSerializerclass LoginUserView(LoginView): serializer_class = LoginUserSerializer permission_classes = [AllowAny] def post(self, request, *args, **kwargs): serializer = AuthTokenSerializer(data=request.data) serializer.is_valid(raise_exception=True) user = serializer.validated_data['user'] login(request, user) return super(LoginUserView, self).post(request)使用該代碼，我偶然發(fā)現(xiàn)了問題：當我嘗試使用已激活的帳戶登錄時，一切看起來都很好，但是當我嘗試未激活的帳戶時Account is not activated，我得到：{ "non_field_errors": [ "Unable to log in with provided credentials." ]}我認為，與其說是序列化程序，不如說是來自視圖。
1 回答
一只名叫tom的貓
TA貢獻1906條經(jīng)驗 獲得超3個贊
好的，多虧了 Shafikur Rahman 的建議，我才能讓它發(fā)揮作用。在我嘗試調(diào)試它pdb并在里面設(shè)置跟蹤LoginUserSerializer但沒有發(fā)生任何事情之后，我意識到在我的視圖中我不是指向我編寫的序列化程序，而是指向AuthTokenSerializer. 即使在那之后它仍然不起作用，因為我對 djangologin()和 DRF 的validate()工作原理缺乏了解。以下固定代碼供參考：
看法：
class LoginUserView(LoginView):
serializer_class = LoginUserSerializer
permission_classes = [AllowAny]
def post(self, request, *args, **kwargs):
serializer = LoginUserSerializer(data=request.data) # changed to desired serializer
serializer.is_valid(raise_exception=True)
user = serializer.validated_data['user']
login(request, user)
return super(LoginUserView, self).post(request)
和序列化器：
class LoginUserSerializer(serializers.ModelSerializer):
username = serializers.CharField() # added missing fields for serializer
password = serializers.CharField()
class Meta:
model = UserModel
fields = ('username', 'password')
def validate(self, data):
user = authenticate(**data)
if user:
if user.is_active:
data['user'] = user # added user model to OrderedDict that serializer is validating
return data # and in sunny day scenario, return this dict, as everything is fine
raise exceptions.AuthenticationFailed('Account is not activated')
raise exceptions.AuthenticationFailed()
另外為了authenticate()不能激活用戶，我不得不添加
AUTHENTICATION_BACKENDS = [
'django.contrib.auth.backends.AllowAllUsersModelBackend'
]
在項目設(shè)置中。
添加回答
舉報
0/150
提交
取消