Django搭建博客（六）：为后台添加用户认证机制

from django.urls import re_path
from . import views


urlpatterns = [
    ... ...
    re_path(r'^accounts/login/{0,1}$', views.login, name='login'),
    re_path(r'^accounts/logout/{0,1}$', views.logout, name='logout'),
]

from django.shortcuts import render
from django.http import HttpResponseRedirect, HttpResponse
from django.contrib import auth
from django.contrib.auth.decorators import login_required
from django.urls import reverse
from .models import Post
from .forms import LoginForm, ArticleForm



def login(request):
    if request.method == 'GET':
        form = LoginForm()
        return render(
            request,
            'myblog/login.html',
            {'pagedata':
                 {'form': form},
            }
        )
    elif request.method == 'POST':
        form = LoginForm(request.POST)
        
        #判断表格内数据是否有效 有效则继续 否则重新登陆
        if form.is_valid():
            username, password = form.cleaned_data.values()
            #判断用户密码是否正确
            user = auth.authenticate(request, username=username, password=password)
            #如果用户密码正确返回管理页面 否则返回登录页面
            if user != None:
                #如果账号是激活状态 登录用户并返回管理页面
                if user.is_active:
                    auth.login(request, user)
                    return HttpResponseRedirect(reverse('article_list'))
            else:
                return render(
                    request,
                    'myblog/login.html',
                    {'pagedata':
                         {'form': form},
                    }
                )
        else:
            return render(
                request,
                'myblog/login.html',
                {'pagedata':
                     {'form': form},
                }
            )

#登出
def logout(request):
    auth.logout(request)
    return HttpResponseRedirect(reverse('index'))