Django学习系列之重写User模型和登录验证

重写User模型

Django内置的User模型可能不适合某些项目,我们可能要基于内置的添加一些字段

创建users app

startapp users

修改settings.py配置文件,覆盖默认的user模型

settings.py
添加以下内容
'''是app的名称,和models里的class名称(表名)'''
AUTH_USER_MODEL = "users.UserProfile"

编写users app下的models.py

models.py

from django.db import models
#引用内置的user模型
from django.contrib.auth.models import  AbstractUser
# Create your models here.

#集成内置的user模型,并添加新的字段
class UserProfile(AbstractUser):
    nick_name = models.CharField(max_length=,verbose_name='昵称',default='')
    birday = models.DateField(null=True,blank=True,verbose_name='生日')
    choice_gender = (
        ("male","男"),
        ("female","女"),
    )
    gender = models.CharField(choices=choice_gender,default='female',max_length=,verbose_name='性别')
    address = models.CharField(max_length=,default='',verbose_name='地址')
    mobile = models.CharField(max_length=,null=True,blank=True,verbose_name='手机号')
    image = models.ImageField(upload_to='image/%Y/%m',default='image/default.png',max_length=)

    class Meta:
        verbose_name = "用户信息"
        verbose_name_plural = "用户信息"

    def __unicode__(self):
        return self.username

生成数据表

makemigrtions
migrate

登录数据库查看

自定义登录验证

由于用户表中带email字段,想实现通过email和用户名都能登录,就需要重写django authenticate(登录验证)方法

views.py

from django.shortcuts import render
from django.contrib.auth import  authenticate,login
from django.contrib.auth.backends import ModelBackend
from django.db.models import Q

from .models import UserProfile,EmailVerfyRecord,Banner

#重写的authenticate登录验证
class CustomBackend(ModelBackend):
    def authenticate(self, username=None, password=None, **kwargs):
        try:
            #Q方法的作用是或的意思,acc_login方法把username和password传过来,如果以username为条件去库里查没查到的话,就以email为条件去库里查(因为传过来的username 可能是用户名或者email)
            user = UserProfile.objects.get(Q(username=username)|Q(email=username))
            #检测username和password是否匹配
            if user.check_password(password):
                return user
        except Exception as e:
            return None

#登录方法
def acc_login(request):
    if request.method == 'POST':
        user_name = request.POST.get('username','')
        pass_word = request.POST.get('password','')
        user = authenticate(username=user_name,password=pass_word)
        if user is not None:
            if user.is_active:
                login(request,user)
                return render(request,'index.html')
            else:
                return render(request,'login.html',{'msg':'用户未激活'})
        else:
            return render(request, 'login.html',{'mgs':'用户名或密码错误'})
    elif request.method == 'GET':
        return render(request,'login.html')

settings.py

# AUTH 方法（支持邮箱登录）
AUTHENTICATION_BACKENDS = ('users.views.CustomBackend',)

到此,我们就支持邮箱和用户名登录了