django权限控制功能实现

来源：互联网发布：rhino mac授权码编辑：程序博客网时间：2024/05/21 17:20

django框架自带用户权限功能，在django.contrib.auth模块下，使用时需要导入该模块。

1、在app下创建一个中间件middleware.py文件，用户拦截并判断用户是否登录，内容如下：

class UserAuthModdleware(object):    def process_request(self, request):        path = request.path        if path == '/userLogin/' or path == '/check_code/' or path == '/admin/' or path == '/sonar/login/' :#不拦截            return None        elif not request.user.is_authenticated():#验证不通过进入登录界面            return render(request,'login.html')        return None

2、在views.py中写用户登录注销函数

from django.contrib.auth import authenticate,login,logout#用户登录def userLogin(request):    try:        if request.method == 'POST':            req = request.POST.copy()            username = req.get('username')            password = req.get('password')            checkCode = req.get('check_code')            loginSuccess = ''            loginError = ''            usernameError = ''            passwordError = ''            checkCodeError = ''            if checkCode.upper() == request.session['checkCode'].upper():                if username != None and password != None:                   #authenticate是django.contrib.auth中验证函数                    **newUser = authenticate(username=username, password=password)**                    if newUser:                        login(request, newUser)                        request.session.set_expiry(30 * 60)                        return HttpResponse(simplejson.dumps({'loginSuccess': 'loginSuccess'}, ensure_ascii=False))                    else:                        loginError = '*用户名和密码不匹配！'                elif username is None:                    usernameError = '*用户名不能为空！'                elif password is None:                    passwordError = '*密码不能为空！'            else:                checkCodeError = '*验证码不正确！'        else:            return render(request, 'login.html')        validateMsg = {'loginSuccess': loginSuccess, 'username': username, 'password': password,\                       'checkCodeError': checkCodeError, 'loginError': loginError, 'usernameError': usernameError,\                       'passwordError': passwordError}        return HttpResponse(simplejson.dumps(validateMsg, ensure_ascii=False))    except Exception,e:        logger.error(e)        return

#注销def userLogout(request):    try:        logout(request)    except Exception,e:        logger.error(e)    return render(request,'login.html')

#验证码 # 代码：生成一张图片，在图片中写文件    # request.session['CheckCode'] =  图片上的内容    # 自动生成图片，并且将图片中的文字保存在session中    # 将图片内容返回给用户def check_code(request):    try:        stream = io.BytesIO()        # img图片对象,code在图像中写的内容        img, code = **create_validate_code()**        img.save(stream, "png")        # 图片页面中显示,立即把session中的CheckCode更改为目前的随机字符串值        request.session["checkCode"] = code        return HttpResponse(stream.getvalue())    except Exception,e:        logger.error(e)        return**其中create_validate_code()函数为（写在checkCode.py中）：**#!/usr/bin/env python#coding:utf-8import randomfrom PIL import Image, ImageDraw, ImageFont, ImageFilter_letter_cases = "abcdefghjkmnpqrstuvwxy"  # 小写字母，去除可能干扰的i，l，o，z_upper_cases = _letter_cases.upper()  # 大写字母_numbers = ''.join(map(str, range(3, 10)))  # 数字init_chars = ''.join((_letter_cases, _upper_cases, _numbers))def create_validate_code(size=(120, 30),                         chars=init_chars,                         img_type="GIF",                         mode="RGB",                         bg_color=(255, 255, 255),                         fg_color=(0, 0, 255),                         font_size=18,                         font_type="Monaco.ttf",                         length=4,                         draw_lines=True,                         n_line=(1, 2),                         draw_points=True,                         point_chance = 2):    '''    @todo: 生成验证码图片    @param size: 图片的大小，格式（宽，高），默认为(120, 30)    @param chars: 允许的字符集合，格式字符串    @param img_type: 图片保存的格式，默认为GIF，可选的为GIF，JPEG，TIFF，PNG    @param mode: 图片模式，默认为RGB    @param bg_color: 背景颜色，默认为白色    @param fg_color: 前景色，验证码字符颜色，默认为蓝色#0000FF    @param font_size: 验证码字体大小    @param font_type: 验证码字体，默认为 ae_AlArabiya.ttf    @param length: 验证码字符个数    @param draw_lines: 是否划干扰线    @param n_lines: 干扰线的条数范围，格式元组，默认为(1, 2)，只有draw_lines为True时有效    @param draw_points: 是否画干扰点    @param point_chance: 干扰点出现的概率，大小范围[0, 100]    @return: [0]: PIL Image实例    @return: [1]: 验证码图片中的字符串    '''    width, height = size # 宽， 高    img = Image.new(mode, size, bg_color) # 创建图形    draw = ImageDraw.Draw(img) # 创建画笔    def get_chars():        '''生成给定长度的字符串，返回列表格式'''        return random.sample(chars, length)    def create_lines():        '''绘制干扰线'''        line_num = random.randint(*n_line) # 干扰线条数        for i in range(line_num):            # 起始点            begin = (random.randint(0, size[0]), random.randint(0, size[1]))            #结束点            end = (random.randint(0, size[0]), random.randint(0, size[1]))            draw.line([begin, end], fill=(0, 0, 0))    def create_points():        '''绘制干扰点'''        chance = min(100, max(0, int(point_chance))) # 大小限制在[0, 100]        for w in range(width):            for h in range(height):                tmp = random.randint(0, 100)                if tmp > 100 - chance:                    draw.point((w, h), fill=(0, 0, 0))    def create_strs():        '''绘制验证码字符'''        c_chars = get_chars()        strs = ' %s ' % ' '.join(c_chars) # 每个字符前后以空格隔开        font = ImageFont.truetype(font_type, font_size)        font_width, font_height = font.getsize(strs)        draw.text(((width - font_width) / 3, (height - font_height) / 3),                    strs, font=font, fill=fg_color)        return ''.join(c_chars)    if draw_lines:        create_lines()    if draw_points:        create_points()    strs = create_strs()    # 图形扭曲参数    params = [1 - float(random.randint(1, 2)) / 100,              0,              0,              0,              1 - float(random.randint(1, 10)) / 100,              float(random.randint(1, 2)) / 500,              0.001,              float(random.randint(1, 2)) / 500              ]    img = img.transform(size, Image.PERSPECTIVE, params) # 创建扭曲    img = img.filter(ImageFilter.EDGE_ENHANCE_MORE) # 滤镜，边界加强（阈值更大）    return img, strs在项目根目录下引入字体文件Monaco.ttf

3、在settings.py中开启中间件main.views.middleware.UserAuthModdleware

MIDDLEWARE_CLASSES = [    'django.middleware.security.SecurityMiddleware',    'django.contrib.sessions.middleware.SessionMiddleware',    'django.middleware.common.CommonMiddleware',    #'django.middleware.csrf.CsrfViewMiddleware',    'django.contrib.auth.middleware.AuthenticationMiddleware',    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',    'django.contrib.messages.middleware.MessageMiddleware',    'django.middleware.clickjacking.XFrameOptionsMiddleware',    'pagination.middleware.PaginationMiddleware',    **'main.views.middleware.UserAuthModdleware',**]

阅读全文

0 0