Question

我正在使用Django 1.5。我的用户模型是：

class User(AbstractBaseUser):
    #id = models.IntegerField(primary_key=True)
    #identifier = models.CharField(max_length=40, unique=True, db_index=True)
    username = models.CharField(max_length=90, unique=True, db_index=True)
    create_time = models.DateTimeField(null=True, blank=True)
    update_time = models.DateTimeField(null=True, blank=True)
    email = models.CharField(max_length=225)
    #password = models.CharField(max_length=120)
    external = models.IntegerField(null=True, blank=True)
    deleted = models.IntegerField(null=True, blank=True)
    purged = models.IntegerField(null=True, blank=True)
    form_values_id = models.IntegerField(null=True, blank=True)
    disk_usage = models.DecimalField(null=True, max_digits=16, decimal_places=0, blank=True)
    #last_login = models.DateTimeField()

    objects = UserManager()
    USERNAME_FIELD = 'username'
    class Meta:
        db_table = u'galaxy_user'

我无法使用正确的用户名和密码进行身份验证。我的登录功能是：

def login_backend(request):
    if request.method == 'POST':
        username = request.POST['username']
        password = request.POST['password']
        user = authenticate(username=username, password=password)
        if user is not None:
            login(request, user)
            return HttpResponseRedirect('/overview/')
        else:
            return HttpResponseRedirect('/login_backend/')
    else:
        return render_to_response('login_backend.html', context_instance=RequestContext(request))

我做错了什么？

Answer 1

您是否在settings.py中配置了用户模型？

AUTH_USER_MODEL = 'myapp.User'

如果您已经运行 syncdb ，则必须删除数据库并再次运行它。请参阅：https://docs.djangoproject.com/en/1.5/topics/auth/customizing/#substituting-a-custom-user-model

Answer 2

首先更新您的用户模型，它没有密码。您的电子邮件字段不是charfield我认为它是EmailField，您的密码也不是charfield。请搜索正确的字段。密码必须是哈希...

<强> backend.py

from django.conf import settings
from app_name.models import User

class AuthBackend:
    def authenticate(self, username=None, password=None):
        if '@' in username:
            kwargs = {'email': username}
        else:
            kwargs = {'username': username}
        try:
            user = User.objects.get(**kwargs)
            if user.check_password(password):
                return user
        except User.DoesNotExist:
            return None

    def get_user(self, user_id):
        try:
            return User.objects.get(pk=user_id)
        except User.DoesNotExist:
            return None

通过模型创建“check_password”功能。这种检查的方式是，在将输入密码与数据库中保存的密码进行比较之前，输入密码必须是哈希值。

更新 settings.py

AUTHENTICATION_BACKENDS = (
    'app_name.backend.AuthBackend',
    'django.contrib.auth.backends.ModelBackend',
)

无法在Django中使用正确的用户名和密码进行身份验证？

2 个答案: