无法使用提供的凭据登录

Question

我试图在用户注册时自动登录用户，而不是重定向到登录页面，然后只登录。但是，我得到一个错误

"errors": [
   "email",
   "Unable to login with provided credentials."
],

这是我所做的：

def get_token(**user):
    data = {}
    if user.get('email') and user.get('password'):
        serializer = JSONWebTokenSerializer(data=user)
        if serializer.is_valid():
            token = serializer.object['token']
            user = serializer.object['user']
            data = {
                'user': user,
                'token': token
            }
            return data
        else:
            data = {
                'errors': serializer.errors
            }
            return data
    data = {
        'errors': 'Email or Password not provided'
    }
    return data

# creates the user but could not login
class Register(graphene.Mutation):
    '''
        Mutation to register a user
    '''
    class Arguments:
        email = graphene.String(required=True)
        password = graphene.String(required=True)
        password_repeat = graphene.String(required=True)

    success = graphene.Boolean()
    token = graphene.String()
    user = graphene.Field(UserQuery)
    errors = graphene.List(graphene.String)

    def mutate(self, info, email, password, password_repeat):
        if password == password_repeat:
            try:
                serializer = RegistrationSerializer(data={
                    'email': email,
                    'password': password,
                    'is_active': False
                })
                if serializer.is_valid():
                    user = serializer.save()
                    user_identity = get_token(email=user.email, password=user.password)
                    if not user_identity.get('errors'):
                        return Register(success=True, user=user_identity.get('user'), token=user_identity.get('token'))
                    else:
                        return Register(success=False, token=None, errors=['email', 'Unable to login with provided credentials.'])
            except Exception as e:
                errors = [e]
                return Register(success=False, errors=errors)
            errors = ["password", "Passwords don't match."]
            return Register(success=False, errors=errors)


# this works
class Login(graphene.Mutation):
    """
    Mutation to login a user
    """
    class Arguments:
        email = graphene.String(required=True)
        password = graphene.String(required=True)

    success = graphene.Boolean()
    errors = graphene.List(graphene.String)
    token = graphene.String()
    user = graphene.Field(UserQuery)

    def mutate(self, info, email, password):
        user_identity = get_token(email=email, password=password)
        if not user_identity.get('errors'):
            return Login(success=True, user=user_identity.get('user'), token=user_identity.get('token'))
        else:
            return Login(success=False, token=None, errors=['email', 'Unable to login with provided credentials.'])

如果我直接登录就可以，但是如果我想在注册用户时登录，那么它就不起作用，所以我无法在注册用户时传递令牌。

如何在注册时自动登录用户以便传递令牌？

Answer 1

一个可能的原因是您正在将新创建的用户对象更改为 NOT ACTIVE。

在您的代码中，您可以看到您将新创建的用户定义为非活动用户

serializer = RegistrationSerializer(data={
    'email': email,
    'password': password,
    'is_active': False
})

is_active: False 表示用户名和密码可能有效，但您的帐户已被禁用，这就是您在注册期间无法登录的原因。

此外，如果可以看到您所依赖的 JSONWebTokenSerializer 的源代码，在验证函数中它会检查用户是否处于非活动状态，然后抛出错误

这来自 JSONWebTokenSerializer 源代码

def validate(self, attrs):
        credentials = {
            self.username_field: attrs.get(self.username_field),
            'password': attrs.get('password')
        }

        if all(credentials.values()):
            user = authenticate(**credentials)

            if user:
                if not user.is_active:
                    msg = _('User account is disabled.')
                    raise serializers.ValidationError(msg)

                payload = jwt_payload_handler(user)

                return {
                    'token': jwt_encode_handler(payload),
                    'user': user
                }
            else:
                msg = _('Unable to log in with provided credentials.')
                raise serializers.ValidationError(msg)
        else:
            msg = _('Must include "{username_field}" and "password".')
            msg = msg.format(username_field=self.username_field)
            raise serializers.ValidationError(msg)

所以，我看到的一种解决方案是将 is_active 标志设为 true 或删除 is_active: False，它会起作用。

无法使用提供的凭据登录

Unable to login with provided credentials

python

django

django-rest-framework

django-authentication

graphene-django

这来自 JSONWebTokenSerializer 源代码