Django使用自己的用户系统

用过django的人应该都会知道admin,不过，需求是多变的，比如，你有一个变态的用户系统，用户可能有大中小三张头像，除了fisrt name ,last name外还有middle name,T^T name巴拉巴拉，django 的用户系统可能满足不了你的需求，这时候需要用自己的用户系统了，如何能在满足需求的时候充分又利用到django的用户系统？

django使用自己的用户系统 step-1 写自己的auth模块(定义user class) step-2 admin.py 注册到django的admin后台，并且修改一些field step-3 修改settings.py中相应配置

django使用自己的用户系统 用过django的人应该都会知道admin,什么，真的没用过？汗，如果这样的话先看看这个 https://docs.djangoproject.com/en/1.6/ref/contrib/admin/

django自带用户系统，通过上面的admin，以及auth可以方便的管理用户。

不过，需求是多变的，比如，你有一个变态的用户系统，用户可能有大中小三张头像， 除了fisrt name ,last name外还有middle name,T^T name巴拉巴拉，django 的用户系统可能满足不了你的需求，这时候需要用自己的用户系统了，如何能在满足 需求的时候充分又利用到django的用户系统？

官方文档如下，内有详细说明，有英文厌烦症的可以直接略过 https://docs.djangoproject.com/en/dev/topics/auth/customizing/

其实步骤很简单

写自己的auth模块(定义user class); admin.py 注册到django的admin后台，并且修改一些field 修改settings.py中相应配置 step-1 写自己的auth模块(定义user class) 新建一个模块，名字随意，假设叫做myauth

User class继承AbstractBaseUser，UserManager继承BaseUserManager 重写对应的方法，建议浏览下AbstractBaseUser, BaseUserManager的源码

User类不用说，也就是根据自己业务定义的用户class，Manager就是django中 的Manager,做的事情你肯定经常用到，obj.objects.filter(),其中的objects 就是Manager，文档如下 https://docs.djangoproject.com/en/dev/topics/db/managers/

code

# -*- coding: utf-8 -*- from django.db import models from django.contrib.auth.models import (BaseUserManager, AbstractBaseUser)

class UserManager(BaseUserManager):

    def create_user(self, name, email, password=None):

        if not email:             raise ValueError('Users must have an email address')

        user = self.model(             name=name,             email=UserManager.normalize_email(email),         )

        user.set_password(password)         user.save(using=self._db)         return user

    def create_superuser(self, name, email, password=None):

        user = self.create_user(name, email, password)         user.is_admin = True         user.save(using=self._db)         return user

class User(AbstractBaseUser):     '''用户表'''

    name = models.CharField(max_length=100, unique=True)     email = models.EmailField(max_length=100, unique=True)     avatar = models.URLField(blank=True)     created_at = models.DateTimeField(auto_now_add=True)     updated_at = models.DateTimeField(auto_now=True)     is_delete = models.BooleanField(default=False)     is_active = models.BooleanField(default=True)     is_admin = models.BooleanField(default=False)     access_token = models.CharField(max_length=100, blank=True)     refresh_token = models.CharField(max_length=100, blank=True)     expires_in = models.BigIntegerField(max_length=100, default=0)

    objects = UserManager()

    USERNAME_FIELD = 'name'     REQUIRED_FIELDS = ('email',)

    class Meta:         ordering = ('-created_at',)

    def __unicode__(self):         return self.name

    def get_full_name(self):         return self.email

    def get_short_name(self):         return self.name

    def has_perm(self, perm, obj=None):         return True

    def has_module_perms(self, app_label):         return True

    @property     def is_staff(self):         return self.is_admin

重写的字段看下源码就可以解释到了:

1. AbstractBaseUser已经有password, last_login,所以密码这些就不用费心了 2. 由于get_username用到了self.USERNAME_FIELD,所以需要指明哪个字段为用户名 3. get_short_name,get_full_name需要实现,否则会抛异常 4. 其他就按照自己的业务来写即可 5. UserManager重写下两个create方法

class AbstractBaseUser(models.Model):     password = models.CharField(_('password'), max_length=128)     last_login = models.DateTimeField(_('last login'), default=timezone.now)

    is_active = True

    REQUIRED_FIELDS = []

    class Meta:         abstract = True

    def get_username(self):         "Return the identifying username for this User"         return getattr(self, self.USERNAME_FIELD)

    def __str__(self):         return self.get_username()

    def natural_key(self):         return (self.get_username(),)

    def is_anonymous(self):         """         Always returns False. This is a way of comparing User objects to         anonymous users.         """         return False

    def is_authenticated(self):         """         Always return True. This is a way to tell if the user has been         authenticated in templates.         """         return True

    def set_password(self, raw_password):         self.password = make_password(raw_password)

    def check_password(self, raw_password):         """         Returns a boolean of whether the raw_password was correct. Handles         hashing formats behind the scenes.         """         def setter(raw_password):             self.set_password(raw_password)             self.save(update_fields=["password"])         return check_password(raw_password, self.password, setter)

    def set_unusable_password(self):         # Sets a value that will never be a valid hash         self.password = make_password(None)

    def has_usable_password(self):         return is_password_usable(self.password)

    def get_full_name(self):         raise NotImplementedError()

    def get_short_name(self):         raise NotImplementedError()

step-2 admin.py 注册到django的admin后台，并且修改一些field admin注册user，参考文档 https://docs.djangoproject.com/en/dev/ref/contrib/admin/ 代码如下，感觉没什么需要说明的。

myauth/admin.py

#coding: utf-8

from django import forms from django.contrib import admin from django.contrib.auth.models import Group as DjangoGroup from django.contrib.auth.admin import UserAdmin from django.contrib.auth.forms import ReadOnlyPasswordHashField

from myauth.models import User

# 新增用户表单 class UserCreateForm(forms.ModelForm):     """A form for creating new users. Includes all the required     fields, plus a repeated password."""     password1 = forms.CharField(label='Password', widget=forms.PasswordInput)     password2 = forms.CharField(         label='Password confirmation',         widget=forms.PasswordInput,     )

    class Meta:         model = User         fields = ('name', 'email')

    def clean_password2(self):         # Check that the two password entries match         password1 = self.cleaned_data.get("password1")         password2 = self.cleaned_data.get("password2")         if password1 and password2 and password1 != password2:             raise forms.ValidationError("Passwords don't match")         return password2

    def save(self, commit=True):         # Save the provided password in hashed format         user = super(UserCreateForm, self).save(commit=False)         user.set_password(self.cleaned_data["password1"])         if commit:             user.save()         return user

# 修改用户表单 class UserChangeForm(forms.ModelForm):     """A form for updating users. Includes all the fields on     the user, but replaces the password field with admin's     password hash display field.     """     password = ReadOnlyPasswordHashField()

    class Meta:         model = User

    def clean_password(self):         # Regardless of what the user provides, return the initial value.         # This is done here, rather than on the field, because the         # field does not have access to the initial value         return self.initial["password"]

# 注册用户 class MyUserAdmin(UserAdmin):

    form = UserChangeForm     add_form = UserCreateForm

    list_display = ('name', 'created_at', 'email', 'is_delete', 'is_admin')     search_fields = ('name', 'email')     list_filter = ('is_admin',)     readonly_fields = ('created_at', 'updated_at')     fieldsets = (         (None, {'fields': ('name', 'email', 'password', 'avatar',)}),         ('Personal info', {'fields': ('created_at', 'updated_at')}),         (             'Open token info',             {                 'fields': ('access_token', 'refresh_token', 'expires_in')             }         ),         ('Permissions', {'fields': ('is_delete', 'is_admin', 'is_active')}),         ('Important dates', {'fields': ('last_login',)}),     )     add_fieldsets = (         (             None,             {                 'classes': ('wide',),                 'fields': ('name', 'email', 'password1', 'password2'),             }         ),     )     ordering = ('created_at',)     filter_horizontal = ()

admin.site.register(User, MyUserAdmin)

step-3 修改settings.py中相应配置 添加 AUTH_USER_MODEL = 'myauth.User' install_app不要忘记加上myauth模块

grep django的源码可以看到,很多地方直接使用了配置AUTH_USER_MODEL

user = models.ForeignKey(settings.AUTH_USER_MODEL)

def get_user_model():     """     Returns the User model that is active in this project.     """     from django.db.models import get_model

    try:         app_label, model_name = settings.AUTH_USER_MODEL.split('.')     except ValueError:         raise ImproperlyConfigured("AUTH_USER_MODEL must be of the form 'app_label.model_name'")     user_model = get_model(app_label, model_name)     if user_model is None:         raise ImproperlyConfigured("AUTH_USER_MODEL refers to model '%s' that has not been installed" % settings.AUTH_USER_MODEL)     return user_model

ps: django admin更改主题，django admin的主题实在是太朴素了 https://riccardo.forina.me/bootstrap-your-django-admin-in-3-minutes/