From the FBV CBV bis (authenticator)

The essays we see in restframework.views dispatch is handling the request of the entrance, which will first request is encapsulated by initialize_request, request the package not only has the original request, as well as the parser, certification, and rendering.

Authenticate

authenticators=self.get_authenticators()

Look what get_authenticators done:

Clear list comprehensions self.authentication_classes:

This is APIView property, very familiar with it? Because almost use restframework projects almost always configure it setting.py files in the project, such as:

<wiz_code_mirror>

      
REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': (
        'rest_framework_jwt.authentication.JSONWebTokenAuthentication',
        'rest_framework.authentication.SessionAuthentication',
        'rest_framework.authentication.BasicAuthentication',
    )
}

Be readily appreciated, the default is read project file setting.py, dispatch the validator will find initialize_request encapsulated request object, then

The implementation of the initial method

Self .perform_authentication ( Request ) is responsible for verification:

Performed request.user:

Here we see the actual call self._authenticate ()

　　　　Explanation:

for Authenticator in Self . authenticators :
by traversing find our authenticator
user_auth_tuple = authenticator.authenticate(self)

Performing an authenticator authenticate (self) method must implement this method returns the value in the authentication device is a tuple

except exceptions.APIException： self._not_authenticated() raise

如果认证类出现异常，就抛出这个异常，认证失败

if user_auth_tuple is not None:
          self._authenticator = authenticator
          self.user, self.auth = user_auth_tuple
          return

验证通过，将 user_auth_tuple的两个元素分别赋值给request的user和auth

self._not_authenticated()

　　　　如果所有的认证器都没抛出异常，且返回值都是None，就执行这个函数，也就也是匿名用户，可在seeting.py中配置

既然我们的CBV是继承于APIView,那自然就可以在函数中定义DEFAULT_AUTHENTICATION_CLASSES，并编写我们自己的认证方式：

      
from rest_framework.exceptions import AuthenticationFailed
class MyAuthentication(object):
    # authenticate authenticate_header 两个方法是必须有的，authenticate用来写我们自己的认证方式，authenticate_header直接写pass就行，不写会抛错，缺少authenticate_header方法
    def authenticate(self, request):
        self.token = request._request.GET.get('token')
        if not self.token:
            raise AuthenticationFailed('用户认证失败')   # 如果认证失败，就抛出一个AuthenticationFailed异常
        return ('wbj', self.token)      # 如果认证通过，就行返回一个元组，第一个元素是用户身份(user)，第二个是auth
    def authenticate_header(self, request):      
        pass

使用MyAuthentication进行身份认证：

      
        x 
       
class Book(APIView):
    authentication_classes = [MyAuthentication, ]
    def dispatch(self, request, *args, **kwargs):
        return super().dispatch(request, *args, **kwargs)
    def get(self, request):
        # get a book
        return HttpResponse(json.dumps({'code': '20000'}))
    def post(self, request):
        return HttpResponse(json.dumps({'code': '20000'}))
    def put(self, request):
        # update a book
        return HttpResponse(json.dumps({'code': '20000'}))
    def delete(self, request):
        # delete a book
        return HttpResponse(json.dumps({'code': '20000'}))

　　进行测试：

　　带token请求

不带token请求

From the FBV CBV bis (authenticator)

Guess you like