blocks|key|4505994|text|您不能直接访问request.user。您需要访问请求对象，然后获取用户属性。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4505995|如下所示：|4505996|user+=++self.context['request'].user|code-block|syntax|javascript|4505997|或者为了安全起见，|4505998|user+=+None
request+=+self.context.get("request")
if+request+and+hasattr(request,+"user"):
++++user+=+request.user|4505999|有关extra+context+can+be+read+here的更多信息|4506000|entityMap|0|LINK|mutability|MUTABLE|url|http://www.django-rest-framework.org/api-guide/serializers/#including-extra-context^0|7|C|0|0|0|0|0|2|U|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|13|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|14|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|15|8|@]|D|@]|E|$]]|$1|O|3|P|5|J|7|16|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|17|8|@]|D|@$9|18|A|19|1|1A]]|E|$]]|$1|S|3|-4|5|6|7|1B|8|@]|D|@]|E|$]]]|T|$U|$5|V|W|X|E|$Y|Z]]]]

You cannot access the <code>request.user</code> directly. You need to access the request object, and then fetch the user attribute.

Like this:

<pre><code>user = self.context['request'].user
</code></pre>

Or to be more safe,

<pre><code>user = None
request = self.context.get("request")
if request and hasattr(request, "user"):
 user = request.user
</code></pre>

More on <a href="http://www.django-rest-framework.org/api-guide/serializers/#including-extra-context">extra context can be read here</a>

blocks|key|4506027|text|实际上，您不必费心考虑上下文。有一种更好的方法：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4506028|from+rest_framework.fields+import+CurrentUserDefault

class+PostSerializer(serializers.ModelSerializer):

++++class+Meta:
++++++++model+=+Post

+++def+save(self):
++++++++user+=+CurrentUserDefault()++#+<=+magic!
++++++++title+=+self.validated_data['title']
++++++++article+=+self.validated_data['article']|code-block|syntax|javascript|4506029|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Actually, you don't have to bother with context. There is a much better way to do it:

<pre><code>from rest_framework.fields import CurrentUserDefault

class PostSerializer(serializers.ModelSerializer):

 class Meta:
 model = Post

 def save(self):
 user = CurrentUserDefault() # &lt;= magic!
 title = self.validated_data['title']
 article = self.validated_data['article']
</code></pre>

blocks|key|4506078|text|正如Igor在其他答案中提到的，您可以使用CurrentUserDefault。如果您不想仅因此而重写保存方法，则使用doc|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4506079|from+rest_framework+import+serializers

class+PostSerializer(serializers.ModelSerializer):
++++user+=+serializers.PrimaryKeyRelatedField(read_only=True,+default=serializers.CurrentUserDefault())
++++class+Meta:
++++++++model+=+Post|code-block|syntax|javascript|4506080|entityMap|0|LINK|mutability|MUTABLE|url|https://www.django-rest-framework.org/api-guide/validators/#currentuserdefault^0|1N|3|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

As Igor mentioned in other answer, you can use CurrentUserDefault. If you do not want to override save method just for this, then use <a href="https://www.django-rest-framework.org/api-guide/validators/#currentuserdefault" rel="noreferrer">doc</a>:
<pre><code>from rest_framework import serializers

class PostSerializer(serializers.ModelSerializer):
 user = serializers.PrimaryKeyRelatedField(read_only=True, default=serializers.CurrentUserDefault())
 class Meta:
 model = Post
</code></pre>

blocks|key|4506821|text|CurrentUserDefault可用于表示当前用户的默认类。为了使用它，“request”必须在实例化序列化程序时作为上下文字典的一部分提供。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4506822|在views.py中|4506823|serializer+=+UploadFilesSerializer(data=request.data,+context={'request':+request})|code-block|syntax|javascript|4506824|这是传递请求的示例|4506825|在serializers.py中|4506826|owner+=+serializers.HiddenField(
++++default=serializers.CurrentUserDefault()
)|4506827|Source+From+Rest+Framework|offset|length|4506828|entityMap|0|LINK|mutability|MUTABLE|url|https://www.django-rest-framework.org/api-guide/validators/#currentuserdefault^0|0|0|0|0|0|0|0|Q|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|12|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|13|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|14|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|15|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|16|8|@]|9|@$Q|17|R|18|1|19]]|A|$]]|$1|S|3|-4|5|6|7|1A|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

CurrentUserDefault
A default class that can be used to represent the current user. In order to use this, the 'request' must have been provided as part of the context dictionary when instantiating the serializer.
in views.py
<pre class="lang-py prettyprint-override"><code>serializer = UploadFilesSerializer(data=request.data, context={'request': request})
</code></pre>
<h1>This is example to pass request</h1>
in serializers.py
<pre class="lang-py prettyprint-override"><code>owner = serializers.HiddenField(
 default=serializers.CurrentUserDefault()
)
</code></pre>
<a href="https://www.django-rest-framework.org/api-guide/validators/#currentuserdefault" rel="noreferrer">Source From Rest Framework</a>

blocks|key|4506211|text|在视图内部调用.save(...)时，可以传入request.user：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4506212|class+EventSerializer(serializers.ModelSerializer):

++++class+Meta:
++++++++model+=+models.Event
++++++++exclude+=+['user']


class+EventView(APIView):

++++def+post(self,+request):
++++++++es+=+EventSerializer(data=request.data)
++++++++if+es.is_valid():
++++++++++++es.save(user=self.request.user)
++++++++++++return+Response(status=status.HTTP_201_CREATED)
++++++++return+Response(data=es.errors,+status=status.HTTP_400_BAD_REQUEST)|code-block|syntax|javascript|4506213|这是一个模型：|4506214|class+Event(models.Model):
++++user+=+models.ForeignKey(to=settings.AUTH_USER_MODEL,+on_delete=models.CASCADE)
++++date+=+models.DateTimeField(default=timezone.now)
++++place+=+models.CharField(max_length=255)|4506215|entityMap^0|7|A|N|C|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|X|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|P|$]]

You can pass <code>request.user</code> when calling <code>.save(...)</code> inside a view:

<pre><code>class EventSerializer(serializers.ModelSerializer):

 class Meta:
 model = models.Event
 exclude = ['user']


class EventView(APIView):

 def post(self, request):
 es = EventSerializer(data=request.data)
 if es.is_valid():
 es.save(user=self.request.user)
 return Response(status=status.HTTP_201_CREATED)
 return Response(data=es.errors, status=status.HTTP_400_BAD_REQUEST)
</code></pre>

This is the model:

<pre><code>class Event(models.Model):
 user = models.ForeignKey(to=settings.AUTH_USER_MODEL, on_delete=models.CASCADE)
 date = models.DateTimeField(default=timezone.now)
 place = models.CharField(max_length=255)
</code></pre>

blocks|key|4506934|text|在视图中使用以下代码：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4506935|serializer+=+UploadFilesSerializer(data=request.data,+context={'request':+request})|code-block|syntax|javascript|4506936|然后在序列化程序中使用以下代码访问它：|4506937|user+=+self.context.get("request").user|4506938|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Use this code in view:
<pre><code>serializer = UploadFilesSerializer(data=request.data, context={'request': request})
</code></pre>
then access it with this in serializer:
<pre><code>user = self.context.get(&quot;request&quot;).user
</code></pre>

blocks|key|4506178|text|你需要在你的序列化程序中做一个小的编辑：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4506179|class+PostSerializer(serializers.ModelSerializer):

++++class+Meta:
++++++++model+=+Post

++++def+save(self):
++++++++user+=+self.context['request'].user
++++++++title+=+self.validated_data['title']
++++++++article+=+self.validated_data['article']|code-block|syntax|javascript|4506180|下面是一个使用模型混合视图集的示例。在create方法中，您可以找到调用序列化程序的正确方式。get_serializer方法正确地填充上下文字典。如果您需要使用另一个在视图集中定义的序列化程序，请参阅update方法，了解如何使用上下文字典启动序列化程序，该方法还会将请求对象传递给序列化程序。|offset|length|style|CODE|4506181|class+SignupViewSet(mixins.UpdateModelMixin,+mixins.CreateModelMixin,+viewsets.GenericViewSet):

++++http_method_names+=+["put",+"post"]
++++serializer_class+=+PostSerializer

++++def+create(self,+request,+*args,+**kwargs):
++++++++serializer+=+self.get_serializer(data=request.data)
++++++++serializer.is_valid(raise_exception=True)
++++++++self.perform_create(serializer)
++++++++headers+=+self.get_success_headers(serializer.data)
++++++++return+Response(serializer.data,+status=status.HTTP_201_CREATED,+headers=headers)

++++def+update(self,+request,+*args,+**kwargs):
++++++++partial+=+kwargs.pop('partial',+False)
++++++++instance+=+self.get_object()
++++++++kwargs['context']+=+self.get_serializer_context()
++++++++serializer+=+PostSerializer(instance,+data=request.data,+partial=partial,+**kwargs)
++++++++serializer.is_valid(raise_exception=True)
++++++++self.perform_update(serializer)++++
++++++++return+Response(serializer.data)|4506182|entityMap|0|LINK|mutability|MUTABLE|url|http://www.cdrf.co/3.9/rest_framework.viewsets/GenericViewSet.html#get_serializer_context^0|0|0|J|6|2T|6|1B|E|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@$I|Z|J|10|K|L]|$I|11|J|12|K|L]]|9|@$I|13|J|14|1|15]]|A|$]]|$1|M|3|N|5|D|7|16|8|@]|9|@]|A|$E|F]]|$1|O|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

You need a small edit in your serializer:

<pre><code>class PostSerializer(serializers.ModelSerializer):

 class Meta:
 model = Post

 def save(self):
 user = self.context['request'].user
 title = self.validated_data['title']
 article = self.validated_data['article']
</code></pre>

Here is an example, using Model mixing viewsets. In <code>create</code> method you can find the proper way of calling the serializer. <a href="http://www.cdrf.co/3.9/rest_framework.viewsets/GenericViewSet.html#get_serializer_context" rel="nofollow noreferrer">get_serializer</a> method fills the context dictionary properly. If you need to use a different serializer then defined on the viewset, see the <code>update</code> method on how to initiate the serializer with context dictionary, which also passes the request object to serializer.

<pre><code>class SignupViewSet(mixins.UpdateModelMixin, mixins.CreateModelMixin, viewsets.GenericViewSet):

 http_method_names = ["put", "post"]
 serializer_class = PostSerializer

 def create(self, request, *args, **kwargs):
 serializer = self.get_serializer(data=request.data)
 serializer.is_valid(raise_exception=True)
 self.perform_create(serializer)
 headers = self.get_success_headers(serializer.data)
 return Response(serializer.data, status=status.HTTP_201_CREATED, headers=headers)

 def update(self, request, *args, **kwargs):
 partial = kwargs.pop('partial', False)
 instance = self.get_object()
 kwargs['context'] = self.get_serializer_context()
 serializer = PostSerializer(instance, data=request.data, partial=partial, **kwargs)
 serializer.is_valid(raise_exception=True)
 self.perform_update(serializer) 
 return Response(serializer.data)
</code></pre>

blocks|key|4506303|text|这个问题的解决方案可能很简单，但是我尝试使用self.contenxt['request'].user访问，但不能在序列化程序中工作。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4506304|如果您使用的是DRF，那么显然，通过令牌登录是唯一的来源，也可能是其他来源，这是有争议的。|4506305|朝着解决方案前进。|4506306|创建serializer.create时传入request.user实例|4506307|views.py|4506308|if+serializer.is_valid():
++++++++++++watch+=+serializer.create(serializer.data,+request.user)|code-block|syntax|javascript|4506309|serializer.py|4506310|+def+create(self,+validated_data,+usr):
++++return+Watch.objects.create(user=usr,+movie=movie_obj,+action=validated_data['action'])|4506311|entityMap^0|M|T|0|0|0|2|H|M|C|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|11|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|12|8|@]|D|@]|E|$]]|$1|J|3|K|5|6|7|13|8|@$9|14|A|15|B|C]|$9|16|A|17|B|C]]|D|@]|E|$]]|$1|L|3|M|5|6|7|18|8|@]|D|@]|E|$]]|$1|N|3|O|5|P|7|19|8|@]|D|@]|E|$Q|R]]|$1|S|3|T|5|6|7|1A|8|@]|D|@]|E|$]]|$1|U|3|V|5|P|7|1B|8|@]|D|@]|E|$Q|R]]|$1|W|3|-4|5|6|7|1C|8|@]|D|@]|E|$]]]|X|$]]

The solution can be simple for this however I tried accessing using <code>self.contenxt['request'].user</code> but not working in the serializer.
If you're using DRF obviously login via token is the only source or maybe others that's debatable.
Moving toward a solution.
Pass the <code>request.user</code> instance while creating <code>serializer.create</code>
views.py
<pre><code>if serializer.is_valid():
 watch = serializer.create(serializer.data, request.user)
</code></pre>
serializer.py
<pre><code> def create(self, validated_data, usr):
 return Watch.objects.create(user=usr, movie=movie_obj, action=validated_data['action'])
</code></pre>

blocks|key|4506629|text|对于那些使用Django的ORM并将用户添加为外键的用户，他们将需要包括用户的整个对象，而我只能在create方法中执行此操作并删除必填字段：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4506630|class+PostSerializer(serializers.ModelSerializer):

def+create(self,+validated_data):
++++
++++request+=+self.context.get("request")
++++
++++post+=+Post()
++++post.title+=+validated_data['title']
++++post.article+=+validated_data['article']
++++post.user+=+request.user

++++post.save()

++++return+post

class+Meta:
++++model+=+Post
++++fields+=+'__all__'
++++extra_kwargs+=+{'user':+{'required':+False}}|code-block|syntax|javascript|4506631|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

For those who used Django's ORM and added the user as a foreign key, they will need to include the user's entire object, and I was only able to do this in the create method and removing the mandatory field:
<pre><code>class PostSerializer(serializers.ModelSerializer):

def create(self, validated_data):
 
 request = self.context.get(&quot;request&quot;)
 
 post = Post()
 post.title = validated_data['title']
 post.article = validated_data['article']
 post.user = request.user

 post.save()

 return post

class Meta:
 model = Post
 fields = '__all__'
 extra_kwargs = {'user': {'required': False}}
</code></pre>

blocks|key|4507113|text|drf+srz+page|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4507114|在我的项目中，它是有效的，我的用户字段是只读的，所以我需要在create方法中获取用户id|4507115|class+CommentSerializer(serializers.ModelSerializer):
++++comment_replis+=+RecursiveField(many=True,+read_only=True)
++++user+=+UserSerializer(read_only=True)

++++class+Meta:
++++++++model+=+PostComment
++++++++fields+=+('_all_')

++++def+create(self,+validated_data):
+


++++++++post+=+PostComment.objects.create(**validated_data)+++
++++++++print(self._dict_['_kwargs']['data']["user"])+#+geting+#request.data["user"]+#++<-+mian+code
++++++++post.user=User.objects.get(id=self._dict_['_kwargs']['data']["user"])
++++++++return+post|code-block|syntax|javascript|4507116|在我的项目中，我尝试了这种方式，它起作用了|4507117|entityMap|0|LINK|mutability|MUTABLE|url|https://www.django-rest-framework.org/api-guide/serializers/^0|0|C|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@$A|V|B|W|1|X]]|C|$]]|$1|D|3|E|5|6|7|Y|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|Z|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|10|8|@]|9|@]|C|$]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|C|$]]]|N|$O|$5|P|Q|R|C|$S|T]]]]

<a href="https://www.django-rest-framework.org/api-guide/serializers/" rel="nofollow noreferrer">drf srz page</a>
in my project it worked my user field was read only so i needed to get
user id in the create method
<pre><code>class CommentSerializer(serializers.ModelSerializer):
 comment_replis = RecursiveField(many=True, read_only=True)
 user = UserSerializer(read_only=True)

 class Meta:
 model = PostComment
 fields = ('_all_')

 def create(self, validated_data):
 


 post = PostComment.objects.create(**validated_data) 
 print(self._dict_['_kwargs']['data'][&quot;user&quot;]) # geting #request.data[&quot;user&quot;] # &lt;- mian code
 post.user=User.objects.get(id=self._dict_['_kwargs']['data'][&quot;user&quot;])
 return post


</code></pre>
in my project i tried this way and it work

blocks|key|4506389|text|如果您使用的是通用视图，并且希望在保存实例时注入当前用户，则可以覆盖perform_create或perform_update|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4506390|def+perform_create(self,+serializer):
++++serializer.save(user=self.request.user)|code-block|syntax|javascript|4506391|user将作为属性添加到kwargs中，您可以在序列化程序中通过validated_data访问它|4506392|user+=+validated_data['user']|4506393|entityMap|0|LINK|mutability|MUTABLE|url|https://www.django-rest-framework.org/api-guide/generic-views/#get_serializer_classself^0|Y|E|1D|E|Y|E|0|0|0|0|4|C|6|W|E|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]]|D|@$9|11|A|12|1|13]]|E|$]]|$1|F|3|G|5|H|7|14|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|15|8|@$9|16|A|17|B|C]|$9|18|A|19|B|C]|$9|1A|A|1B|B|C]]|D|@]|E|$]]|$1|M|3|N|5|H|7|1C|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|1D|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]]]

If you are using generic views and you want to inject current user at the point of saving the instance then you can override <a href="https://www.django-rest-framework.org/api-guide/generic-views/#get_serializer_classself" rel="nofollow noreferrer"><code>perform_create</code></a> or <code>perform_update</code>:
<pre><code>def perform_create(self, serializer):
 serializer.save(user=self.request.user)
</code></pre>
<code>user</code> will be added as an attribute to <code>kwargs</code> and you can access it through <code>validated_data</code> in serializer
<pre><code>user = validated_data['user']
</code></pre>

I've tried something like this, it does not work. 

<pre><code>class PostSerializer(serializers.ModelSerializer):

 class Meta:
 model = Post

 def save(self):
 user = self.context['request.user']
 title = self.validated_data['title']
 article = self.validated_data['article']
</code></pre>

I need a way of being able to access request.user from my Serializer class.

How to get Request.User in Django-Rest-Framework serializer?

Django

我试过这样的东西，它不起作用。class PostSerializer(serializers.ModelSerializer):    class Meta:        model = Post    def save(self):        user = self.context['request.user']        title = self.validated_data['t

问如何在Django-Rest-Framework序列化程序中获取Request.User？
EN

回答 11

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Django-Rest-Framework序列化程序中获取Request.User？EN

回答 11

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Django-Rest-Framework序列化程序中获取Request.User？
EN