Django 中的用户身份验证和权限管理：设计与实现指南

from django.contrib.auth.models import User

# 创建用户
user = User.objects.create_user(username='john', email='john@example.com', password='123456')

# 身份验证
from django.contrib.auth import authenticate

user = authenticate(username='john', password='123456')
if user is not None:
    # 身份验证成功
    print("Authentication successful")
else:
    # 身份验证失败
    print("Authentication failed")

from django.contrib.auth import login, logout
from django.shortcuts import redirect

def login_view(request):
    # 处理用户登录逻辑
    user = authenticate(request, username=request.POST['username'], password=request.POST['password'])
    if user is not None:
        login(request, user)
        return redirect('dashboard')
    else:
        # 登录失败处理
        return redirect('login')

def logout_view(request):
    logout(request)
    return redirect('login')

from django.contrib.auth.models import Group, Permission

# 创建权限组
group = Group(name='Editor')
group.save()

# 分配权限
permission = Permission.objects.get(name='Can change article')
group.permissions.add(permission)

# 将用户添加到权限组
user.groups.add(group)

from django.contrib.auth.decorators import login_required, permission_required

@login_required
def dashboard(request):
    # 只有登录用户可以访问此视图
    pass

@permission_required('myapp.change_article')
def edit_article(request, article_id):
    # 只有具有“更改文章”权限的用户可以编辑文章
    pass

from django.contrib.auth.models import Permission

# 创建自定义权限
permission = Permission.objects.create(
    codename='can_publish_article',
    name='Can publish article',
    content_type=content_type,
)

from django.contrib.auth.decorators import user_passes_test

def is_editor(user):
    return user.groups.filter(name='Editor').exists()

@user_passes_test(is_editor)
def publish_article(request, article_id):
    # 只有属于“Editor”组的用户可以发布文章
    pass

from django.core.exceptions import PermissionDenied

class CustomPermissionMiddleware:
    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        if not request.user.has_perm('myapp.change_article'):
            raise PermissionDenied("You don't have permission to access this resource.")
        response = self.get_response(request)
        return response

from django.contrib.auth.models import AbstractUser
from django.db import models

class CustomUser(AbstractUser):
    # 添加自定义字段
    bio = models.TextField(blank=True)

# settings.py

AUTH_USER_MODEL = 'myapp.CustomUser'

from myapp.models import CustomUser

# 创建用户
user = CustomUser.objects.create_user(username='john', email='john@example.com', password='123456')

# 身份验证
user = authenticate(username='john', password='123456')

python manage.py makemigrations
python manage.py migrate

from django.db import models
from django.contrib.auth.models import Permission

class Role(models.Model):
    name = models.CharField(max_length=100)
    permissions = models.ManyToManyField(Permission)

class UserProfile(models.Model):
    user = models.OneToOneField(User, on_delete=models.CASCADE)
    role = models.ForeignKey(Role, on_delete=models.SET_NULL, null=True)

# 创建角色
editor_role = Role.objects.create(name='Editor')

# 分配权限给角色
editor_role.permissions.add(change_article_permission)

# 将角色分配给用户
user_profile = UserProfile.objects.get(user=user)
user_profile.role = editor_role
user_profile.save()

# 在模板中检查用户的权限
{% if perms.myapp.change_article %}
    <a href="{% url 'edit_article' %}">编辑文章</a>
{% endif %}

// 前端权限控制示例
if (userHasPermission('change_article')) {
    // 显示编辑按钮
}

# settings.py

LOGGING = {
    'version': 1,
    'disable_existing_loggers': False,
    'handlers': {
        'file': {
            'level': 'INFO',
            'class': 'logging.FileHandler',
            'filename': '/path/to/django.log',
        },
    },
    'loggers': {
        'django': {
            'handlers': ['file'],
            'level': 'INFO',
            'propagate': True,
        },
    },
}

import logging

logger = logging.getLogger(__name__)

def my_view(request):
    # 记录用户操作
    logger.info(f"User {request.user.username} accessed view 'my_view'")
    # 其他操作

from cryptography.fernet import Fernet

# 生成密钥
key = Fernet.generate_key()
cipher_suite = Fernet(key)

# 加密数据
encrypted_data = cipher_suite.encrypt(b'my secret data')

# 解密数据
decrypted_data = cipher_suite.decrypt(encrypted_data)

# 使用HTTPS协议发送数据
import requests

response = requests.post('https://example.com/api/', data={'key': 'value'}, verify=True)