1、注册、登陆接口-简单设计

1.1、创建用户注册表的模型类

  1. from django.db import models
  2. from django.core.paginator import Paginator
  4. # Create your models here.
  6. class NewUser(models.Model):
  7.     phone = models.CharField(verbose_name="手机号",max_length=11,unique=True)
  8.     email = models.EmailField(verbose_name="邮箱",max_length=50,unique=True)
  9.     nick = models.CharField(verbose_name="昵称", max_length=50)
  10.     password = models.CharField(verbose_name="密码",max_length=32)
  12.     class Meta:
  13.         verbose_name = "用户表"
  14.         verbose_name_plural = verbose_name
  15.         db_table = "new_user" # 映射的用户注册表名称  
  17.     def __str__(self):
  18.         return self.nick
  1. 检查这个模型所在的app是否注册，没有注册，在settings.py配置文件中，完成注册
  2. 数据迁移：
    1. 生成迁移文件 python manage.py makemigrations
    2. 执行迁移脚本程序 python manage.py migrate
  3. 连接数据库，检查数据表是否创建成功

image.png

1.2、注册、登陆接口视图函数

  1. import hashlib
  2. import json
  3. import time
  5. import django_redis
  6. from django.forms import model_to_dict
  7. from django.http import JsonResponse
  8. from django.db.models import Q
  9. from django.shortcuts import render
  10. from . import models
  12. # Create your views here.
  14. # 注册接口
  15. def register(request):
  16.     email = request.POST.get("email")
  17.     nick = request.POST.get("nick")
  18.     phone = request.POST.get("phone")
  19.     password = request.POST.get("password")
  20.     password2 = request.POST.get("password2")
  22.     if email and nick and phone and password:
  23.         if password != password2:
  24.             return JsonResponse({"code": -1, "msg": "两次输入的密码不一致"})
  25.         user_email = models.NewUser.objects.filter(email=email)
  26.         user_phone = models.NewUser.objects.filter(phone=phone)
  27.         if user_email.exists():
  28.             return JsonResponse({"code": -1, "msg": "email exists"})
  29.         if user_phone.exists():
  30.             return JsonResponse({"code": -1, "msg": "phone exists"})
  31.         new_password = md5(password)
  32.         user = models.NewUser(email=email, nick=nick, phone=phone, password=new_password)
  33.         user.save()
  34.         return JsonResponse({"code": 0, "msg": "success"})
  35.     else:
  36.         return JsonResponse({"code": -1, "msg": "not null"})
  38. # 登陆接口
  39. def login2(request):
  40.     username = request.POST.get("username")  # email + password ; phone+password
  41.     password = request.POST.get("password")
  42.     if username and password:
  43.         user = models.NewUser.objects.filter(Q(email=username) | Q(phone=username))
  44.         if not user.exists():
  45.             return JsonResponse({"code": -1, "msg": "user not exists"})
  46.         if user.first().password != md5(password):
  47.             return JsonResponse({"code": -1, "msg": "password error"})
  49.         #todo:这里要校验当前用户是否已经登录，如果已经登录，那么直接返回token （用来解决重复登陆存储多个token的问题）
  50.         token = md5(str(time.time()) + username)
  51.         user_dict = json.dumps(model_to_dict(user.first()))
  52.         r = django_redis.get_redis_connection()
  53.         expire_time = 60 * 60 * 24 * 1  # session的过期时间
  54.         r.set(token, user_dict, expire_time)
  55.         return JsonResponse({"code": 0, "msg": "login success", "token": token})
  56.     else:
  57.         return JsonResponse({"code": -1, "msg": "not null"})
  61. def md5(s):
  62.     s = str(s)
  63.     m = hashlib.md5(s.encode())
  64.     return m.hexdigest()

配置路由

  1. """thz_django URL Configuration
  3. The `urlpatterns` list routes URLs to views. For more information please see:
  4.     https://docs.djangoproject.com/en/3.2/topics/http/urls/
  5. Examples:
  6. Function views
  7.     1. Add an import:  from my_app import views
  8.     2. Add a URL to urlpatterns:  path('', views.home, name='home')
  9. Class-based views
  10.     1. Add an import:  from other_app.views import Home
  11.     2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
  12. Including another URLconf
  13.     1. Import the include() function: from django.urls import include, path
  14.     2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
  15. """
  16. from django.contrib import admin
  17. from django.urls import path
  18. from user_demo import views as user_demo_view
  20. urlpatterns = [
  21.     path('admin/', admin.site.urls),
  22.     path('user_demo/register', user_demo_view.register), # 绑定路由和视图
  23.     path('user_demo/login', user_demo_view.login2),
  24. ]

验证注册接口

image.pngimage.png

验证登陆接口

image.png
bug：短时间再次登陆，再次返回一个新的token，并存储到Redis中
image.png

1.3、解决重复登陆，Redis存储多个token的问题

  1. 登陆成功，给Redis存储两条记录
    1. 一条记录记录用户名和token，例如 （15503129999:”4a546a5e7b90adf7aa16a091006931e0”）
    2. 一条记录token和用户信息，例如（”4a546a5e7b90adf7aa16a091006931e0”：用户信息）
  1. # 登陆接口
  2. def login2(request):
  3.     username = request.POST.get("username")  # email + password ; phone+password
  4.     password = request.POST.get("password")
  5.     if username and password:
  6.         user = models.NewUser.objects.filter(Q(email=username) | Q(phone=username))
  7.         if not user.exists():
  8.             return JsonResponse({"code": -1, "msg": "user not exists"})
  9.         if user.first().password != md5(password):
  10.             return JsonResponse({"code": -1, "msg": "password error"})
  12.         #todo:这里要校验当前用户是否已经登录，如果已经登录，那么直接返回token （用来解决重复登陆存储多个token的问题）
  13.         user_key = "session_wxj:%s"%user.first().phone
  14.         # 登陆时，给Redis中存储两条记录  （用户名:token）（token:用户信息）
  15.         #
  16.         r = django_redis.get_redis_connection()
  17.         redis_token = r.get(user_key) 
  18.         if redis_token:# 如果Redis中有这个用户的登陆记录就返回上一次登陆获取的token
  19.             return JsonResponse({"code": 0, "msg": "login success", "token": redis_token.decode()})
  20.         #
  21.         token = md5(str(time.time()) + username) # 如果没有登陆记录，就重新返回新的token
  22.         user_dict = json.dumps(model_to_dict(user.first()))
  23.         r = django_redis.get_redis_connection()
  24.         expire_time = 60 * 60 * 24 * 1  # session的过期时间
  25.         #
  26.         r.set(user_key, token, expire_time)# 登陆时，给Redis中存储两条记录  （用户名:token）（token:用户信息）
  27.         #
  28.         r.set(token, user_dict, expire_time)
  29.         return JsonResponse({"code": 0, "msg": "login success", "token": token})
  30.     else:
  31.         return JsonResponse({"code": -1, "msg": "not null"})

image.pngimage.png

2、中间件-校验token

  1. from django.middleware.common import MiddlewareMixin
  2. from django.http.response import HttpResponse, JsonResponse
  3. import django_redis
  4. import json
  6. no_login_urls = ["login", "register", "admin"] # 不需要校验token的接口相关
  9. class TokenMiddleWare(MiddlewareMixin):
  10.     """
  11.     校验接口是否需要传token的中间件
  12.     """
  13.     def check_not_url(self, path):  # /api/login
  14.         for url in no_login_urls:
  15.             if url in path:
  16.                 # 模糊匹配，URL中包含这个就不校验token
  17.                 return True
  19.     def process_request(self, request):
  20.         # 执行路由之前被调用
  21.         login_tag = self.check_not_url(request.path_info)
  22.         if login_tag != True:
  23.             token = request.GET.get("token")
  24.             if not token:
  25.                 return JsonResponse({"code": -1, "msg": "没有传token"})
  26.             r = django_redis.get_redis_connection()
  27.             login_user = r.get(token)
  28.             if not login_user:
  29.                 return JsonResponse({"code": -1, "msg": "token已失效"})
  30.             request.user = json.loads(login_user)  # 给request对象里面增加user属性
  32.         # token = reuqest.headers.get("token")
  33.         # request.path_info   /login /api/register
  35.         # 1、先判断url是否需要登录，需要登录才校验token
  36.         # 2、在判断是否传了token
  37.         # 3、再判断在redis里面是否有token
  39.     # def process_response(self,request,response):
  40.     #     print("process_response")
  41.     #     response["aaaaa"]  =  "111111"
  42.     #     return response
  44.     # def process_exception(self,request,exception):
  45.     #     print("exception",exception)
  46.     #     return

注意：

别忘了在settings.py配置文件中，注册这个中间件