blocks|key|852612|text|下面是一个简单的示例处理程序，它需要一个包含用户名/密码表单的login.html模板。我没有一个注册示例，但它非常类似，在帖子中，您可以验证输入并插入用户记录，而不是进行身份验证。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|852613|class+BaseHandler(tornado.web.RequestHandler):

++++def+get_login_url(self):
++++++++return+u"/login"

++++def+get_current_user(self):
++++++++user_json+=+self.get_secure_cookie("user")
++++++++if+user_json:
++++++++++++return+tornado.escape.json_decode(user_json)
++++++++else:
++++++++++++return+None

class+LoginHandler(BaseHandler):

++++def+get(self):
++++++++self.render("login.html",+next=self.get_argument("next","/"))

++++def+post(self):
++++++++username+=+self.get_argument("username",+"")
++++++++password+=+self.get_argument("password",+"")
++++++++#+The+authenticate+method+should+match+a+username+and+password
++++++++#+to+a+username+and+password+hash+in+the+database+users+table.
++++++++#+Implementation+left+as+an+exercise+for+the+reader.
++++++++auth+=+self.db.authenticate(username,+password)
++++++++if+auth:
++++++++++++self.set_current_user(username)
++++++++++++self.redirect(self.get_argument("next",+u"/"))
++++++++else:
++++++++++++error_msg+=+u"?error="+%2B+tornado.escape.url_escape("Login+incorrect.")
++++++++++++self.redirect(u"/login"+%2B+error_msg)

++++def+set_current_user(self,+user):
++++++++if+user:
++++++++++++self.set_secure_cookie("user",+tornado.escape.json_encode(user))
++++++++else:
++++++++++++self.clear_cookie("user")

class+LogoutHandler(BaseHandler):

++++def+get(self):
++++++++self.clear_cookie("user")
++++++++self.redirect(u"/login)|code-block|syntax|javascript|852614|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here's a simple example handler, which needs a login.html template containing a username/password form. I don't have a sign up example, but it's quite similar, on the post you validate the input and insert the user record rather than authenticating.

<pre><code>class BaseHandler(tornado.web.RequestHandler):

 def get_login_url(self):
 return u"/login"

 def get_current_user(self):
 user_json = self.get_secure_cookie("user")
 if user_json:
 return tornado.escape.json_decode(user_json)
 else:
 return None

class LoginHandler(BaseHandler):

 def get(self):
 self.render("login.html", next=self.get_argument("next","/"))

 def post(self):
 username = self.get_argument("username", "")
 password = self.get_argument("password", "")
 # The authenticate method should match a username and password
 # to a username and password hash in the database users table.
 # Implementation left as an exercise for the reader.
 auth = self.db.authenticate(username, password)
 if auth:
 self.set_current_user(username)
 self.redirect(self.get_argument("next", u"/"))
 else:
 error_msg = u"?error=" + tornado.escape.url_escape("Login incorrect.")
 self.redirect(u"/login" + error_msg)

 def set_current_user(self, user):
 if user:
 self.set_secure_cookie("user", tornado.escape.json_encode(user))
 else:
 self.clear_cookie("user")

class LogoutHandler(BaseHandler):

 def get(self):
 self.clear_cookie("user")
 self.redirect(u"/login)
</code></pre>

blocks|key|852674|text|我开始使用Cole的例子，但意识到我正在创建一个用于访问数据库的帐户，这可能与我们的was应用程序的帐户不是一回事。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|852675|我已经将上面的示例更改为使用bcrpyt。现在，用户到我们的webapp的连接不同于我们的webapp到数据库的连接。My+sample+app+on+github|offset|length|852676|注意:+bcrpyt计算量很大，会阻塞IO循环|852677|class+BaseHandler(tornado.web.RequestHandler):

++def+get_login_url(self):
++++return+u"/login"

++def+get_current_user(self):
++++user_json+=+self.get_secure_cookie("user")
++++if+user_json:
++++++return+tornado.escape.json_decode(user_json)
++++else:
++++++return+None


class+LoginHandler(BaseHandler):

++def+get(self):
++++self.render("login.html",+next=self.get_argument("next","/"),+message=self.get_argument("error","")+)

++def+post(self):
++++email+=+self.get_argument("email",+"")
++++password+=+self.get_argument("password",+"")

++++user+=+self.application.syncdb['users'].find_one(+{+'user':+email+}+)

++++if+user+and+user['password']+and+bcrypt.hashpw(password,+user['password'])+==+user['password']:
++++++self.set_current_user(email)
++++++self.redirect("hello")
++++else:
++++++error_msg+=+u"?error="+%2B+tornado.escape.url_escape("Login+incorrect.")
++++++self.redirect(u"/login"+%2B+error_msg)

++def+set_current_user(self,+user):
++++print+"setting+"%2Buser
++++if+user:
++++++self.set_secure_cookie("user",+tornado.escape.json_encode(user))
++++else:
++++++self.clear_cookie("user")


class+RegisterHandler(LoginHandler):

++def+get(self):
++++self.render(++"register.html",+next=self.get_argument("next","/"))

++def+post(self):
++++email+=+self.get_argument("email",+"")

++++already_taken+=+self.application.syncdb['users'].find_one(+{+'user':+email+}+)
++++if+already_taken:
++++++error_msg+=+u"?error="+%2B+tornado.escape.url_escape("Login+name+already+taken")
++++++self.redirect(u"/login"+%2B+error_msg)


++++password+=+self.get_argument("password",+"")
++++hashed_pass+=+bcrypt.hashpw(password,+bcrypt.gensalt(8))

++++user+=+{}
++++user['user']+=+email
++++user['password']+=+hashed_pass

++++auth+=+self.application.syncdb['users'].save(user)
++++self.set_current_user(email)

++++self.redirect("hello")|code-block|syntax|javascript|852678|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/bootandy/tornado_sample^0|0|1N|N|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@$D|W|E|X|1|Y]]|A|$]]|$1|F|3|G|5|6|7|Z|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|10|8|@]|9|@]|A|$K|L]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|A|$]]]|N|$O|$5|P|Q|R|A|$S|T]]]]

I started using Cole's example but realised I was creating an account for accessing the database which might not be the same thing as an account for our webapp.

I've changed the above example to use bcrpyt. Now a user's connection to our webapp is different from our webapp's connection to the database. <a href="https://github.com/bootandy/tornado_sample" rel="nofollow">My sample app on github</a>

Note: bcrpyt is computationally heavy and will block the IO loop

<pre><code>class BaseHandler(tornado.web.RequestHandler):

 def get_login_url(self):
 return u"/login"

 def get_current_user(self):
 user_json = self.get_secure_cookie("user")
 if user_json:
 return tornado.escape.json_decode(user_json)
 else:
 return None


class LoginHandler(BaseHandler):

 def get(self):
 self.render("login.html", next=self.get_argument("next","/"), message=self.get_argument("error","") )

 def post(self):
 email = self.get_argument("email", "")
 password = self.get_argument("password", "")

 user = self.application.syncdb['users'].find_one( { 'user': email } )

 if user and user['password'] and bcrypt.hashpw(password, user['password']) == user['password']:
 self.set_current_user(email)
 self.redirect("hello")
 else:
 error_msg = u"?error=" + tornado.escape.url_escape("Login incorrect.")
 self.redirect(u"/login" + error_msg)

 def set_current_user(self, user):
 print "setting "+user
 if user:
 self.set_secure_cookie("user", tornado.escape.json_encode(user))
 else:
 self.clear_cookie("user")


class RegisterHandler(LoginHandler):

 def get(self):
 self.render( "register.html", next=self.get_argument("next","/"))

 def post(self):
 email = self.get_argument("email", "")

 already_taken = self.application.syncdb['users'].find_one( { 'user': email } )
 if already_taken:
 error_msg = u"?error=" + tornado.escape.url_escape("Login name already taken")
 self.redirect(u"/login" + error_msg)


 password = self.get_argument("password", "")
 hashed_pass = bcrypt.hashpw(password, bcrypt.gensalt(8))

 user = {}
 user['user'] = email
 user['password'] = hashed_pass

 auth = self.application.syncdb['users'].save(user)
 self.set_current_user(email)

 self.redirect("hello")
</code></pre>

I was wondering if anyone know of any example code or tutorials on implementing a login/signup page in Tornado? Ive seen the examples that come with it, but they seem very facebook/oauth centric.

Tornado login Examples/Tutorials

我想知道是否有人知道在Tornado中实现登录/注册页面的示例代码或教程？我看过它附带的示例，但它们似乎非常以facebook/oauth为中心。

问Tornado登录示例/教程
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Tornado登录示例/教程EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Tornado登录示例/教程
EN