DRF-基于APIView的认证流程

ゝ一世哀愁。 2022-02-14 16:04 234阅读 0赞

# rest framework框架 #

*  我们来看一段伪代码,MyClassView继承了APIView就有了APIView的功能

class APIView(View):
        pass 
    
    
    class MyClassView(APIView):
        pass

*  基于Django的CBV

from django.views import View
    from django.http import HttpResponse
    
    
    class MyClassView(View):
        def get(self, request, *args, **kwargs):
            ret = {
                "state_code": 1000,
                "msg": "successful"
            }
            import json
            return HttpResponse(json.dumps(ret), status=201)
    
        def post(self, request, *args, **kwargs):
            return HttpResponse("created successful")
    
        def delete(self, request, *args, **kwargs):
            return HttpResponse("delete successful")

*  **基于DRF的CBV** ,DRF的APIView在Django的View基础上,增加和丰富了一些功能

from django.views import View
    from django.http import HttpResponse
    from rest_framework.views import APIView
    
    
    class MyClassView(APIView):
        def get(self, request, *args, **kwargs):
            ret = {
                "state_code": 1000,
                "msg": "successful"
            }
            import json
            return HttpResponse(json.dumps(ret), status=201)
    
        def post(self, request, *args, **kwargs):
            return HttpResponse("created successful")
    
        def delete(self, request, *args, **kwargs):
            return HttpResponse("delete successful")

# 原理(流程) #

*  当请求进来,先找CBV里面的dispatch方法

"""
    rest_framework\views.py 
    """
    
     def dispatch(self, request, *args, **kwargs):
            """
            `.dispatch()` is pretty much the same as Django's regular dispatch,
            but with extra hooks for startup, finalize, and exception handling.
            """
            self.args = args
            self.kwargs = kwargs
            # 对原生的request进行加工(丰富了一些功能)
            request = self.initialize_request(request, *args, **kwargs)
            # 获取原生request,request._request
            # 获取认证类的对象,request.authenticators
            self.request = request
            self.headers = self.default_response_headers  # deprecate?
    
            try:
                self.initial(request, *args, **kwargs)
    
                # Get the appropriate handler method
                if request.method.lower() in self.http_method_names:
                    handler = getattr(self, request.method.lower(),
                                      self.http_method_not_allowed)
                else:
                    handler = self.http_method_not_allowed
    
                response = handler(request, *args, **kwargs)
    
            except Exception as exc:
                response = self.handle_exception(exc)
    
            self.response = self.finalize_response(request, response, *args, **kwargs)
            return self.response

*  反射

![img\_dcba43f89f181da9026d8af423f89bdf.png][img_dcba43f89f181da9026d8af423f89bdf.png]

微信截图\_20190108191829

*  request加强

![img\_80a8f7ff3d26b195d2d01e32a3466d23.png][img_80a8f7ff3d26b195d2d01e32a3466d23.png]

微信截图\_20190108200309

*  self.initialize\_request方法做了什么?

![img\_c8c9107c6c022a2cb1d4304dd55575dd.png][img_c8c9107c6c022a2cb1d4304dd55575dd.png]

微信截图\_20190108200451

def initialize_request(self, request, *args, **kwargs):
    """
    Returns the initial request object.
    """
    parser_context = self.get_parser_context(request)
    
    # 加工后新生成了Request对象
    return Request(
        request,  # 原本的那个request
        parsers=self.get_parsers(),
        authenticators=self.get_authenticators(), # 认证相关
        negotiator=self.get_content_negotiator(),
        parser_context=parser_context
    )

*  self.get\_authenticators()方法

![img\_30b8b691e25bc112025174953a76dc57.png][img_30b8b691e25bc112025174953a76dc57.png]

微信截图\_20190108201228

def get_authenticators(self):
    """
    Instantiates and returns the list of authenticators that this view can use.
    """
    # self.authentication_classes = [Dog,Cat]   auth()就是Dog和Cat对象,被装进列表里面 
    return [auth() for auth in self.authentication_classes]

*  get\_authenticators()方法中的self.authentication\_classes,先从当前类找,有就使用当前类的authentication\_classes,没有就使用父类的authentication\_classes,在这里使用的是APIView里面的

![img\_73703e9f2a8544c3e6c421d23388a89e.png][img_73703e9f2a8544c3e6c421d23388a89e.png]

微信截图\_20190108201739

![img\_fe1828c471dc6144fe05dddcd90f366c.png][img_fe1828c471dc6144fe05dddcd90f366c.png]

微信截图\_20190108202231

*  回到dispatch方法,我们可以看到其实request对象里面就有原生request和\[BasicAuthentication,\]

![img\_03eb3b96983e422cd3d0de8ddd17e15a.png][img_03eb3b96983e422cd3d0de8ddd17e15a.png]

微信截图\_20190108203020

*  拿到原生request方法

![img\_a096e8417e4a67edcde8748ea8cb1e9d.png][img_a096e8417e4a67edcde8748ea8cb1e9d.png]

微信截图\_20190108203935

*  获取认证类的对象,request.authenticators和原生request

![img\_a97cb0e284540a9a95c1232f7bd60299.png][img_a97cb0e284540a9a95c1232f7bd60299.png]

微信截图\_20190108204355

*  我们可以查看dispatch方法里面的反射前做了是什么，self.initial方法

![img\_f4e11ecfcc5915717ecebf7765527a19.png][img_f4e11ecfcc5915717ecebf7765527a19.png]

微信截图\_20190108204819

def initial(self, request, *args, **kwargs):
    """
    Runs anything that needs to occur prior to calling the method handler.
    """
        self.format_kwarg = self.get_format_suffix(**kwargs)
    
            # Perform content negotiation and store the accepted info on the request
        neg = self.perform_content_negotiation(request)
        request.accepted_renderer, request.accepted_media_type = neg
    
            # Determine the API version, if versioning is in use.
        version, scheme = self.determine_version(request, *args, **kwargs)
        request.version, request.versioning_scheme = version, scheme
    
        # Ensure that the incoming request is permitted
        self.perform_authentication(request)
        self.check_permissions(request)
        self.check_throttles(request)

![img\_eb486d8c8da005f06f6879b117296f3a.png][img_eb486d8c8da005f06f6879b117296f3a.png]

微信截图\_20190108205218

*  父类的perform\_authentication()方法

![img\_03a054c0548a988f40ee44cbf0797eaf.png][img_03a054c0548a988f40ee44cbf0797eaf.png]

微信截图\_20190108205348

![img\_2ab0ebc80afeec9718cbfcf1fbbf1ae6.png][img_2ab0ebc80afeec9718cbfcf1fbbf1ae6.png]

微信截图\_20190108205626

*  找到user

![img\_f9d644a8cef6c1dda089b62893bdfdb6.png][img_f9d644a8cef6c1dda089b62893bdfdb6.png]

微信截图\_20190108205727

# _authenticate源码
        def _authenticate(self):
            """
            Attempt to authenticate the request using each authentication instance
            in turn.
            """
            for authenticator in self.authenticators:
                try:
                    user_auth_tuple = authenticator.authenticate(self)
                except exceptions.APIException:
                    self._not_authenticated()
                    raise
    
                if user_auth_tuple is not None:
                    self._authenticator = authenticator
                    self.user, self.auth = user_auth_tuple
                    return
    
            self._not_authenticated()

![img\_0d12d5c0ea5bf99df0a4f714d5702e74.png][img_0d12d5c0ea5bf99df0a4f714d5702e74.png]

微信截图\_20190108210210

# 登陆认证 #

*  我们可以编写一个自己的认证类

class MyAuthentication(object):
        def authenticate(self, request):
            token = request._request.GET.get('token')
            if not token:
                from rest_framework import exceptions
                raise exceptions.AuthenticationFailed("对不起,用户认证失败")
            return ("zhangsan", None)

*  postman验证

![img\_90bbf795b63173c9d95f65fba51ab612.png][img_90bbf795b63173c9d95f65fba51ab612.png]

微信截图\_20190108211046

![img\_bb1f2f6511b1a2b0c83623bac2119f33.png][img_bb1f2f6511b1a2b0c83623bac2119f33.png]

微信截图\_20190108211238

*  解决报错

![img\_ab0d10e39391e26eae1ea15e3e7630f7.png][img_ab0d10e39391e26eae1ea15e3e7630f7.png]

微信截图\_20190108211347

*  postman验证

![img\_30c31c2ae5926746a5435f93aa0bf027.png][img_30c31c2ae5926746a5435f93aa0bf027.png]

微信截图\_20190108211418

*  解决方案2

![img\_f9251be98d781a8619032e04dd176db0.png][img_f9251be98d781a8619032e04dd176db0.png]

微信截图\_20190108211524

*  以后我们比如有些API需要认证才能看,我们就可以在这里进行操作

# DRF认证流程: #

*  请求进来先走dispatch方法

1.  dispatch方法里面封装了request

![img\_3dfff30f5e09ef94a33a8b50d77f2297.png][img_3dfff30f5e09ef94a33a8b50d77f2297.png]

微信截图\_20190108211939

1.  调用initial

![img\_10e8c5e3b5ea5d486468a6814ed741a0.png][img_10e8c5e3b5ea5d486468a6814ed741a0.png]

微信截图\_20190108212123

1.  调用perform\_authentication()
    
      
    
    
    ![img\_685680eb95869834146e45ab2cddbd53.png][img_685680eb95869834146e45ab2cddbd53.png]
    
    微信截图\_20190108212249
2.  取user方法

![img\_fdb575bd8a8b40f7e9f8a73f32d03d0f.png][img_fdb575bd8a8b40f7e9f8a73f32d03d0f.png]

微信截图\_20190108212402

1.  user方法里面调用了认证对象

![img\_0b3c7d561198563997cb82b83de33321.png][img_0b3c7d561198563997cb82b83de33321.png]

微信截图\_20190108212533

1.  遍历认证

![img\_dadccbc8d32f7c1f67a2b1fe2c6074c9.png][img_dadccbc8d32f7c1f67a2b1fe2c6074c9.png]

微信截图\_20190108212748

# 使用 #

![img\_426b76792052ec5a520d11fd2fb81b08.png][img_426b76792052ec5a520d11fd2fb81b08.png]

微信截图\_20190108213110

![img\_1e9a135e89f7a1c41944f026b1175eb2.png][img_1e9a135e89f7a1c41944f026b1175eb2.png]

微信截图\_20190108213327

![img\_7513ae81f1358f3e57c03aa024a1e000.png][img_7513ae81f1358f3e57c03aa024a1e000.png]

微信截图\_20190108213349

[img_dcba43f89f181da9026d8af423f89bdf.png]: /images/20220214/80cde95d484641b6ab95fe50282726f5.png
[img_80a8f7ff3d26b195d2d01e32a3466d23.png]: /images/20220214/f2bf49059cfa4584bb2ff90bd9a12803.png
[img_c8c9107c6c022a2cb1d4304dd55575dd.png]: /images/20220214/a984e9592300430491e5da19cc0696ee.png
[img_30b8b691e25bc112025174953a76dc57.png]: /images/20220214/8234c7f49da540ec8cc56939b4c6303f.png
[img_73703e9f2a8544c3e6c421d23388a89e.png]: /images/20220214/da03bdc8f1a444258509a274852bdf64.png
[img_fe1828c471dc6144fe05dddcd90f366c.png]: /images/20220214/2dc37bb9f969415b99a1cb553df461ee.png
[img_03eb3b96983e422cd3d0de8ddd17e15a.png]: /images/20220214/77eb722bb6da412eb73dc49015881d39.png
[img_a096e8417e4a67edcde8748ea8cb1e9d.png]: /images/20220214/4f0088858f384603a1f3e60b24fc6589.png
[img_a97cb0e284540a9a95c1232f7bd60299.png]: /images/20220214/978fc9076ab7442ab7a20a6189bebf89.png
[img_f4e11ecfcc5915717ecebf7765527a19.png]: /images/20220214/1c49b9999b9f42ed87df5a3f9d271015.png
[img_eb486d8c8da005f06f6879b117296f3a.png]: /images/20220214/a43ea0b29990493dbc02adb1a9b36dbd.png
[img_03a054c0548a988f40ee44cbf0797eaf.png]: /images/20220214/b84dd3e977ef4034be55d903a9849e28.png
[img_2ab0ebc80afeec9718cbfcf1fbbf1ae6.png]: /images/20220214/e41f3e95f6b9499b8ff5edcbbaf39281.png
[img_f9d644a8cef6c1dda089b62893bdfdb6.png]: /images/20220214/9623fcd0c556418ea6b9d1495d2f14e9.png
[img_0d12d5c0ea5bf99df0a4f714d5702e74.png]: /images/20220214/233a9cfef4374b9889249c8c458f2834.png
[img_90bbf795b63173c9d95f65fba51ab612.png]: /images/20220214/9273ac083284435295765b7c9d901908.png
[img_bb1f2f6511b1a2b0c83623bac2119f33.png]: /images/20220214/6ba1832848f4434db13276f14b51e546.png
[img_ab0d10e39391e26eae1ea15e3e7630f7.png]: /images/20220214/bd7c96d9bae94a5ca84f4585f65d60a8.png
[img_30c31c2ae5926746a5435f93aa0bf027.png]: /images/20220214/f65003fe80754ad2b1d6fd805c2ae612.png
[img_f9251be98d781a8619032e04dd176db0.png]: /images/20220214/49b968326b084b30bd623db9c5969c3a.png
[img_3dfff30f5e09ef94a33a8b50d77f2297.png]: /images/20220214/0e786de305b34b129178e3ac4f0e50b4.png
[img_10e8c5e3b5ea5d486468a6814ed741a0.png]: /images/20220214/af677488967a445fb2c42cb1153e42b4.png
[img_685680eb95869834146e45ab2cddbd53.png]: /images/20220214/781d1e5c14284e92ad04df4534b0fbef.png
[img_fdb575bd8a8b40f7e9f8a73f32d03d0f.png]: /images/20220214/26c39795b83d425c9b9972cfe2d7a788.png
[img_0b3c7d561198563997cb82b83de33321.png]: /images/20220214/0fa63118188c41dabf0eb17d2ec2f7e2.png
[img_dadccbc8d32f7c1f67a2b1fe2c6074c9.png]: /images/20220214/f95920856e934e70a63fe7a97608ef7e.png
[img_426b76792052ec5a520d11fd2fb81b08.png]: /images/20220214/43bfd2d897724fd4aa02b7f57ca19e62.png
[img_1e9a135e89f7a1c41944f026b1175eb2.png]: /images/20220214/7bfe91e2688b4d33bc9f3e368e3d0347.png
[img_7513ae81f1358f3e57c03aa024a1e000.png]: /images/20220214/fff6c818215a4e9ba04c5427c1137475.png