用户不会验证 Django

Question

我问过这个问题好几次了，这几天一直在研究这个问题，但还是不行。用户不会在 Django 中进行身份验证。我正在使用基本用户模型。我的用户未通过身份验证且表单未提交，我不清楚出了什么问题。

这是我的 views.py:

 def payments(request):
    if request.method == "POST":
        form = CustomUserCreationForm(request.POST)
        if form.is_valid():
            user = form.save(commit=False)
            user.is_active = False # this is because they need to fill out another form before I deem them active
            user.set_password(form.cleaned_data['password1'])
            user.save() 
            user = authenticate(request, username=form.cleaned_data['username'], password=form.cleaned_data['password1'])
            if user.is_authenticated:
                login(request, user, backend='django.contrib.auth.backends.ModelBackend')
                return redirect('agreements')
            else: 
                raise ValidationError("User could not be authenticated.")            
        else:
            raise ValidationError("Form is not valid. Try Again.")
    else:
        form = CustomUserCreationForm()
  return render(request, 'register.html', {'form': form})

这是我的 forms.py:

class CustomUserCreationForm(forms.ModelForm):
    username = forms.CharField(label='Username', widget=forms.TextInput(attrs={'class': "form-control"}))
    password1 = forms.CharField(label='Password', widget=forms.PasswordInput(attrs={'class': "form-control"}))
    password2 = forms.CharField(label='Password confirmation', widget=forms.PasswordInput(attrs={'class': "form-control"}))
    first_name = forms.CharField(label='First Name', widget=forms.TextInput(attrs={'class': "form-control"}))
    last_name = forms.CharField(label='Last Name', widget=forms.TextInput(attrs={'class': "form-control"}))
    email = forms.CharField(label= 'Email', widget=forms.EmailInput(attrs={'class': "form-control"}))

    class Meta:
        model = User
        fields = ['first_name', 'last_name', 'email', 'username']

    def clean_password(self):
        password1 = self.cleaned_data.get('password1')
        password2 = self.cleaned_data.get('password2')
        if password1 and password2 and password1 != password2:
            raise forms.ValidationError("Passwords do not match")
        return password2


    def save(self, commit=True):
        user = super(CustomUserCreationForm, self).save(commit=False)
        user.username = self.cleaned_data['username']
        user.first_name = self.cleaned_data['first_name']
        user.last_name = self.cleaned_data['last_name']
        user.email = self.cleaned_data['email']
        user.set_password(self.cleaned_data['password1'])

        if commit:
            user.save()
        return user

Answer 1

我认为这是因为 user.is_active = False 如果将其设置为 True，则只有任何用户通过身份验证并尝试登录 Django 才会被允许，请在文档中查看 is_active ，如果你不想要它说的这种默认行为，他们确实有另一种选择

You can use AllowAllUsersModelBackend or AllowAllUsersRemoteUserBackend if you want to allow inactive users to login

用户不会验证 Django

User will not authenticate Django

django

django-authentication

django-users