Django，request.user 打印 AnonymousUser，即使我已登录

Question

views.py

class StorageView(viewsets.ModelViewSet):
    serializer_class = StorageSerializer

    def get_queryset(self):
        if self.request.user.is_authenticated:
            user = self.request.user
            queryset = Storage.objects.filter(username=user.username)
            return queryset
        else:
            print(self.request.user)
            return []

urls.py

from django.urls import path, include
from django.urls import re_path as url

urlpatterns = [
    path('auth/', include('rest_auth.urls')),
    path('auth/register/', include('rest_auth.registration.urls'))
]

settings.py

INSTALLED_APPS = [
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    # CORS
    'corsheaders',
    # REST
    'rest_framework',
    'rest_framework.authtoken',
    'rest_auth',
    'rest_auth.registration',
    'django.contrib.sites',
    # App
    'backend'
]

MIDDLEWARE = [
    'corsheaders.middleware.CorsMiddleware',
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]

SITE_ID = 1
ACCOUNT_EMAIL_REQUIRED = True
ACCOUNT_USERNAME_REQUIRED = False
ACCOUNT_SESSION_REMEMBER = True
ACCOUNT_AUTHENTICATION_METHOD = 'email'
ACCOUNT_UNIQUE_EMAIL = True

REST_FRAMEWORK = {    
    'DATETIME_FORMAT': "%m/%d/%Y %I:%M%P",    
    'DEFAULT_AUTHENTICATION_CLASSES': [        
    'rest_framework.authentication.TokenAuthentication',    
    ],
}

我通过表单或 api 登录，但 is_authenticated 方法看不到我

通过api登录 postman screenshot

views.py 中的 get_queryset() 函数中的条件总是计算为 false，即使我登录它也一直打印“AnonymousUser”，为什么？在我的例子中，如何检查用户是否登录？

Answer 1

提供

permission_classes = [IsAuthenticated]

在您看来。

并通过

每个请求的授权令牌

axios
  .get(
    `http://localhost:8000/anything`,
    {
      headers: {
        Authorization: `Token ${token}`,
      },
    }
  )

Django，request.user 打印 AnonymousUser，即使我已登录

Django, request.user prints AnonymousUser, even if i logged in

django

django-rest-framework

django-rest-auth