blocks|key|2068798|text|你可以使用。假设一个视图需要登录，用户在没有登录的情况下向视图发出请求，那么@login_required装饰器将返回响应代码401的响应。在auth拦截器中，如果状态代码为401，则截取状态代码，然后将用户重定向到登录页。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2068799|示例站点：http://witoldsz.github.io/angular-http-auth/|offset|length|2068800|entityMap|0|LINK|mutability|MUTABLE|url|http://witoldsz.github.io/angular-http-auth/^0|0|5|18|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

You can use Http-Auth-Interceptor. Suppose A view requires login and a user makes a request to the view without login then @login_required decorator returns the response with response code 401. In auth interceptor intercept the status code if status code is 401 then redirect user to the login page.

example site: <a href="http://witoldsz.github.io/angular-http-auth/" rel="nofollow">http://witoldsz.github.io/angular-http-auth/</a>

blocks|key|2068804|text|在$routeProvider中添加“解析”如下：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2068805|++++$routeProvider+
++++++.when('/',+{+
+++++++++templateUrl:+'/views/main.html'+})+
++++++.when('/admin',+{
+++++++++templateUrl:+'views/admin.html',+
+++++++++controller:+'AdminCtrl',+
+++++++++resolve:+{+loggedin:+checkLoggedin+}+})+
++++++.when('/login',+{+
+++++++++templateUrl:+'views/login.html',+
+++++++++controller:+'LoginCtrl'+})+
++++++.otherwise({+redirectTo:+'/'+});+-|code-block|syntax|javascript|2068806|请参阅更多信息：https://vickev.com/#!/article/authentication-in-single-page-applications-node-js-passportjs-angularjs|offset|length|2068807|entityMap|0|LINK|mutability|MUTABLE|url|https://vickev.com/#!/article/authentication-in-single-page-applications-node-js-passportjs-angularjs^0|0|0|8|2T|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

Add resolve in your $routeProvider as:

<pre><code> $routeProvider 
 .when('/', { 
 templateUrl: '/views/main.html' }) 
 .when('/admin', {
 templateUrl: 'views/admin.html', 
 controller: 'AdminCtrl', 
 resolve: { loggedin: checkLoggedin } }) 
 .when('/login', { 
 templateUrl: 'views/login.html', 
 controller: 'LoginCtrl' }) 
 .otherwise({ redirectTo: '/' }); -
</code></pre>

See more at: <a href="https://vickev.com/#!/article/authentication-in-single-page-applications-node-js-passportjs-angularjs" rel="nofollow">https://vickev.com/#!/article/authentication-in-single-page-applications-node-js-passportjs-angularjs</a>

blocks|key|2588451|text|正如前面的答案所提到的，最好是在需要登录时，Django后端可以发出401响应。现在，它似乎正在发送302，如果您正在发出XHR请求，您仍然可以在浏览器中观察到这一点。正如您所发现的，在角中使用$http拦截器是查找401并将用户发送到登录页面的常见方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2588452|我采取了一种不同的方法:通过一个名为$user.get()的方法实现一个稍微抽象一点的服务--它向已知的端点发出请求(在我的例子中是/api/users/current)，如果它看到401，就拒绝返回的承诺。在您的情况下，您可以实现一个拒绝处理程序，它使用window.location.href将用户发送到您的专用登录页面。|offset|length|style|CODE|2588453|免责声明:我在风暴路径工作，我们花了很多时间思考这个问题:)在我上面的评论中，我指的是我们的风暴路径角SDK+--您可以查看这个库，看看我是如何解决这个问题的。|2588454|entityMap|0|LINK|mutability|MUTABLE|url|http://stormpath.com/|1|https://github.com/stormpath/stormpath-sdk-angularjs^0|0|I|B|1U|I|3K|K|0|7|4|0|1A|8|1|0^^$0|@$1|2|3|4|5|6|7|T|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|U|8|@$D|V|E|W|F|G]|$D|X|E|Y|F|G]|$D|Z|E|10|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|11|8|@]|9|@$D|12|E|13|1|14]|$D|15|E|16|1|17]]|A|$]]|$1|J|3|-4|5|6|7|18|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]|R|$5|M|N|O|A|$P|S]]]]

As mentioned in the previous answer, it would be best if your Django back-end can issue a 401 response when login is required. Right now it sounds like it's sending a 302, which you can still observe in the browser if you're making an XHR request. As you've found, using $http interceptors in Angular are a common way of looking for a 401 and sending the user to a login page.

I've taken a different approach: implement a service that abstracts this a bit, via a method called <code>$user.get()</code> - it makes a request to a known endpoint (in my case, <code>/api/users/current</code>) and rejects the returned promise if it sees a 401. In your case you could implement a rejection handler that uses <code>window.location.href</code> to send the user to your dedicated login page

Disclaimer: I work at <a href="http://stormpath.com" rel="nofollow">Stormpath</a> and we’ve spent a log of time thinking about this :) In my comments above I’m referring to our <a href="https://github.com/stormpath/stormpath-sdk-angularjs" rel="nofollow">Stormpath Angular SDK</a> - you can look at this library to see how I’ve solved this problem.

blocks|key|771742|text|在定义我的应用程序时，我会这样做：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|771743|$httpProvider.interceptors.push('errorInterceptor');|offset|length|style|CODE|771744|这方面的代码如下：|771745|app.factory('errorInterceptor',+['$q',+'$rootScope',+'$location',
++++function+($q,+$rootScope,+$location)+{
++++++++return+{
++++++++++++request:+function+(config)+{
++++++++++++++++return+config+%7C%7C+$q.when(config);
++++++++++++},
++++++++++++requestError:+function(request){
++++++++++++++++return+$q.reject(request);
++++++++++++},
++++++++++++response:+function+(response)+{
++++++++++++++++return+response+%7C%7C+$q.when(response);
++++++++++++},
++++++++++++responseError:+function+(response)+{
++++++++++++++++if+(response+&&+response.status+==+302+&&+response.data.url)+{
++++++++++++++++++++window.location+=+response.data.url;
++++++++++++++++++++return;
++++++++++++++++}
++++++++++++++++return+$q.reject(response);
++++++++++++}
++++++++};
}]);|code-block|syntax|javascript|771746|基本上，我们不能使用login_required。我们必须创建一个新的装饰师，并提供302状态与一个url。|771747|entityMap^0|0|0|1G|0|0|0|A|E|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@$D|U|E|V|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|W|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|X|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|Y|8|@$D|Z|E|10|F|G]]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|11|8|@]|9|@]|A|$]]]|R|$]]

When defining my app i'm doing this:

<code>$httpProvider.interceptors.push('errorInterceptor');</code>

and The code for that is below:

<pre><code>app.factory('errorInterceptor', ['$q', '$rootScope', '$location',
 function ($q, $rootScope, $location) {
 return {
 request: function (config) {
 return config || $q.when(config);
 },
 requestError: function(request){
 return $q.reject(request);
 },
 response: function (response) {
 return response || $q.when(response);
 },
 responseError: function (response) {
 if (response &amp;&amp; response.status == 302 &amp;&amp; response.data.url) {
 window.location = response.data.url;
 return;
 }
 return $q.reject(response);
 }
 };
}]);
</code></pre>

Basically, we can't use <code>login_required</code>. We have to create a new decorator and provide a 302 status with a url.

blocks|key|771793|text|如果要通过AJAX将API调用返回到服务器，则很可能不希望将响应重定向到登录页面。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|771794|我有同样的用例，当用户没有登录时，我让我自己的装饰器返回403。如果你愿意的话，你也可以使用401+(我把它注释掉了)。|771795|我使用403是因为401似乎意味着WWW认证。|offset|length|771796|from+django.http+import+HttpResponse,+HttpResponseForbidden


def+logged_in_or_deny(func):
++++def+check_request(request,+*args,+**kwargs):
++++++++if+(request.user.is_authenticated()):
++++++++++++return+func(request,+*args,+**kwargs)
++++++++else:
++++++++++++return+HttpResponseForbidden('You+must+be+logged+in')+++++++#+403+Response
++++++++++++#return+HttpResponse('You+must+be+logged+in',+status=401)++++#+401+Response
++++return+check_request|code-block|syntax|javascript|771797|然后你就会像这样保护你的观点：|771798|@logged_in_or_deny
def+your_view(request):
++++#+...+your+code+...
++++return+HttpResponse('Your+normal+response+:)')|771799|从角度上看，您似乎已经知道如何使用拦截器检查响应代码并相应地重定向用户。如果您使用403或401，您应该检查针对响应体，以防您在将来有类似的错误。|771800|虽然您已经拥有的内容会起作用，但302个响应可以用于其他原因。最好有一个显式的4xx响应，而不是3xx重定向响应，因为很明显，这是客户端错误(缺少身份验证)。|771801|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/q/25269861/2891365^0|0|0|9|D|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|13|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|14|8|@]|9|@$F|15|G|16|1|17]]|A|$]]|$1|H|3|I|5|J|7|18|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|19|8|@]|9|@]|A|$]]|$1|O|3|P|5|J|7|1A|8|@]|9|@]|A|$K|L]]|$1|Q|3|R|5|6|7|1B|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|1C|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|1D|8|@]|9|@]|A|$]]]|V|$W|$5|X|Y|Z|A|$10|11]]]]

If you're making APIs calls via AJAX back to the server, most likely you don't want the response to be redirected to the login page.

I have the same use case and made my own decorator to return a 403 when the user is not logged in. You may also use 401 instead if you like (I left it commented out).

I use 403 because <a href="https://stackoverflow.com/q/25269861/2891365">401 seems to imply WWW authentication</a>.

<pre><code>from django.http import HttpResponse, HttpResponseForbidden


def logged_in_or_deny(func):
 def check_request(request, *args, **kwargs):
 if (request.user.is_authenticated()):
 return func(request, *args, **kwargs)
 else:
 return HttpResponseForbidden('You must be logged in') # 403 Response
 #return HttpResponse('You must be logged in', status=401) # 401 Response
 return check_request
</code></pre>

Then you would protect your view like this:

<pre><code>@logged_in_or_deny
def your_view(request):
 # ... your code ...
 return HttpResponse('Your normal response :)')
</code></pre>

<hr>

From Angular, it seems like you already know how to use an interceptor to check the response code and redirect the user accordingly. If you use the 403 or 401, you should check the against the response body just in case you respond with similar errors in the future.

While what you already have would work, 302 responses can be used for other reasons. It's better to have an explicit 4xx response rather than a 3xx redirection response since it'll be immediately obvious that it's a client side error (missing authentication).

I have a web app that's already written in Django, and it is working quite well. I want to add a few views for angular as the plan is to move into that direction. One issue i'm facing is that some of my controllers require login, with django we normally use the <code>@login_required</code> decorator and everything is fine.

But with angular.js calling the controllers (for api's), the redirect is not happening. I'm assuming I'll have to somehow check if my django user is authenticated directly from angular side. Is there any explanation on how to confirm this on angular? I have been struggling with this and have read the following:

<a href="https://docs.angularjs.org/api/ng/service/" rel="nofollow noreferrer">https://docs.angularjs.org/api/ng/service/</a>$http

<a href="https://medium.com/@vince_prignano/angular-js-with-django-bde834dbd61e" rel="nofollow noreferrer">https://medium.com/@vince_prignano/angular-js-with-django-bde834dbd61e</a>

<a href="https://stackoverflow.com/questions/28776155/routeprovider-not-triggered-after-login-redirect">$routeProvider not triggered after login redirect</a>

<a href="http://www.django-rest-framework.org/api-guide/authentication/" rel="nofollow noreferrer">http://www.django-rest-framework.org/api-guide/authentication/</a>

Basically, I want to confirm, via Angular, that my user is logged in and if not, redirect them to the login page.

EDIT

I'm implementing a request interceptor as shown here:

<a href="https://stackoverflow.com/questions/21269007/interceptor-not-working">Interceptor not working</a>

However, in django <code>@login_required</code> it's returning the html of the redirecting page. Is there a way to get the URL and forward the user there?

django and angular.js with authentication

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我有一个已经用Django编写的web应用程序，它运行得很好。我想增加一些角度的看法，因为计划是向那个方向移动。我面临的一个问题是，我的一些控制器需要登录，对于django，我们通常使用@login_required装饰器，一切都很好。但是，由于angular.js调用控制器(对于api)，重定向不会发生。我假设我必须...

问使用身份验证的django和angular.js
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用身份验证的django和angular.jsEN