在Django Rest框架中处理JWT身份验证和软删除用户

pip install djangorestframework-jwt

# settings.py

INSTALLED_APPS = [
    ...
    'rest_framework',
    'rest_framework_jwt',
    ...
]

REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': [
        'rest_framework_jwt.authentication.JSONWebTokenAuthentication',
        ...
    ],
    ...
}

JWT_AUTH = {
    'JWT_SECRET_KEY': 'your-secret-key',  # 设置JWT的密钥
    'JWT_ALGORITHM': 'HS256',
    'JWT_ALLOW_REFRESH': True,
    'JWT_EXPIRATION_DELTA': datetime.timedelta(days=7),  # 设置JWT的过期时间
    ...
}

from rest_framework_jwt.views import obtain_jwt_token

urlpatterns = [
    ...
    path('api-token-auth/', obtain_jwt_token),  # 获取JWT Token的API
    ...
]

from django.db import models

class User(models.Model):
    ...
    is_deleted = models.BooleanField(default=False)
    ...

user.is_deleted = True
user.save()

users = User.objects.filter(is_deleted=False)