Django @login_required 获得 class 次观看

Django @login_required for class views

我继承了一个 Django(1.5.1) 项目,我需要在 @login_required 装饰器后面放置一个视图。这是我在 views.py:

中的内容

我从 here 那里得到了这段代码,看起来它的目的是允许某人将 @login_required 装饰器应用到 class

class LoginRequiredMixin(object):
    """
    View mixin which verifies that the user has authenticated.

    NOTE:
        This should be the left-most mixin of a view.
    """

    @method_decorator(login_required)
    def dispatch(self, *args, **kwargs):
        return super(LoginRequiredMixin, self).dispatch(*args, **kwargs)


class PermissionRequiredMixin(object):
    login_url = settings.LOGIN_URL
    permission_required = None
    raise_exception = False
    redirect_field_name = '/workers/'

    def dispatch(self, request, *args, **kwargs):
        # Verify class settings
        if self.permission_required == None or len(
            self.permission_required.split(".")) != 2:
            raise Error("'PermissionRequiredMixin' requires "
                "'permission_required' attribute to be set.")

        has_permission = request.user.has_perm(self.permission_required)

        if not has_permission:
            if self.raise_exception:
                return HttpResponseForbidden()
            else:
                path = urlquote(request.get_full_path())
                tup = self.login_url, self.redirect_field_name, path
                return HttpResponseRedirect("%s?%s=%s" % tup)

        return super(PermissionRequiredMixin, self).dispatch(
            request, *args, **kwargs)

然后我将其应用到我想添加权限的视图:

class RootWorkerView(LoginRequiredMixin, PermissionRequiredMixin, APIView):
    renderer_classes = (WorkersJSONRenderer, JSONRenderer,
                        BrowsableAPIRenderer)

    def get(self, request):
        worker_list = rest_models.WorkerList(request)
        serializer = WorkerListSerializer(worker_list)
        return Response(serializer.data)

APIView 参数是一个遗留问题,因为它以前是唯一的参数。这个对吗?

当运行时,我一无所获。我想要保护的视图模板显示时没有登录提示。

来自 urls.py 的相关片段:

url(r'^workers/$', views.RootWorkerView.as_view(),
    name='root_worker_view'),

url(r'^login/$', 'django.contrib.auth.views.login',
    {'template_name': 'dashboard/login.html'}),

/login/ 确实有效,我可以登录成功,所以这不是问题。

我觉得 @method_decorator(login_required) 没有发挥作用。有什么想法吗?

您可以在urls.py

中添加装饰器
from django.contrib.auth.decorators import login_required
 url(r'^workers/$', login_required(views.RootWorkerView.as_view()))

这对我有用。

现在您可以使用 Django 内置的 LoginRequiredMixin

from django.contrib.auth.mixins import LoginRequiredMixin

class MyView(LoginRequiredMixin, View):
    login_url = '/login/'
    redirect_field_name = 'redirect_to'

https://docs.djangoproject.com/en/3.2/topics/auth/default/#the-loginrequired-mixin