125 lines
4.1 KiB
Python
125 lines
4.1 KiB
Python
|
"""
|
|||
|
|
用户登录视图
|
|||
|
|
"""
|
|||
|
|
from django.shortcuts import render, HttpResponse, redirect
|
|||
|
|
from django import forms
|
|||
|
|
from app import models
|
|||
|
|
from app.utils.bootstrap import BootstrapForm, BootstrapModelForm
|
|||
|
|
from app.utils.code import check_code # 验证码
|
|||
|
|
from app.utils.encrypt import md5
|
|||
|
|
from io import BytesIO # 用于在内存中生成文件，验证码用
|
|||
|
|
|
|||
|
|
"""
|
|||
|
|
两种实现方式
|
|||
|
|
1.LoginForm 是用Form实现，字段需要自己写
|
|||
|
|
2.LoginModelForm 是用ModelForm实现，字段可以从数据库(models)中获取
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
"""登录窗体"""
|
|||
|
|
|
|||
|
|
|
|||
|
|
class LoginForm(BootstrapForm):
|
|||
|
|
username = forms.CharField(
|
|||
|
|
label='用户名',
|
|||
|
|
widget=forms.TextInput,
|
|||
|
|
required=True, # 必填
|
|||
|
|
)
|
|||
|
|
password = forms.CharField(
|
|||
|
|
label='密码',
|
|||
|
|
widget=forms.PasswordInput(render_value=True), # render_value 不清空密码
|
|||
|
|
required=True, # 必填
|
|||
|
|
)
|
|||
|
|
img_code = forms.CharField(
|
|||
|
|
label='验证码',
|
|||
|
|
widget=forms.TextInput,
|
|||
|
|
required=True, # 必填
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
# 钩子方法，猎取密码的md5值
|
|||
|
|
def clean_password(self):
|
|||
|
|
pwd = self.cleaned_data.get('password')
|
|||
|
|
return md5(pwd)
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 这个类没有用到，因为登录界面就两个输入框 ，简单，所以用Form实现
|
|||
|
|
class LoginModelForm(BootstrapModelForm):
|
|||
|
|
class Meta:
|
|||
|
|
models = models.Admin
|
|||
|
|
fields = ['username', 'password']
|
|||
|
|
|
|||
|
|
|
|||
|
|
""" 用户登录 """
|
|||
|
|
|
|||
|
|
|
|||
|
|
def login(request):
|
|||
|
|
if request.method == 'GET':
|
|||
|
|
form = LoginForm()
|
|||
|
|
return render(request, 'login.html', {'form': form})
|
|||
|
|
|
|||
|
|
form = LoginForm(data=request.POST)
|
|||
|
|
if form.is_valid():
|
|||
|
|
# 验证成功，获取到用户名和密码
|
|||
|
|
# form.cleaned_data本身是一个字典
|
|||
|
|
print(form.cleaned_data)
|
|||
|
|
|
|||
|
|
# 验证码校验
|
|||
|
|
# 取出用户输入的验证码，并且从cleaned_data字典中删除，确保在数据库验证中不携带验证码
|
|||
|
|
user_input_imgcode = form.cleaned_data.pop('img_code')
|
|||
|
|
code = request.session.get('img_code', '')
|
|||
|
|
if code.upper() != user_input_imgcode.upper():
|
|||
|
|
form.add_error('img_code', '验证码错误')
|
|||
|
|
return render(request, 'login.html', {'form': form})
|
|||
|
|
|
|||
|
|
# 查询数据库中的用户名,没查到返回None
|
|||
|
|
# models.Admin.objects.filter(username=form.cleaned_data['username'],password=form.cleaned_data['password']).first()
|
|||
|
|
admin_object = models.Admin.objects.filter(**form.cleaned_data).first()
|
|||
|
|
print(admin_object) # 验证通过后，所有数据都在form.cleaned_data
|
|||
|
|
if not admin_object:
|
|||
|
|
# 主动在password下展示错误信息
|
|||
|
|
form.add_error('password', '用户名或密码错误')
|
|||
|
|
return render(request, 'login.html', {'form': form})
|
|||
|
|
# 正确输入
|
|||
|
|
# 这里就要用到cookie和session的知识了，
|
|||
|
|
# 1.先生成一个随机字符 2.写入到本地浏览器的cookie中 3.再写入到服务器(网站)的session中
|
|||
|
|
# 但django帮我们简化成了
|
|||
|
|
# request.session['info'] = admin_object.username # 可以存入一个值
|
|||
|
|
request.session['info'] = {'id': admin_object.id, 'username': admin_object.username}
|
|||
|
|
# 如果登录成功，session会保存7天，免登录
|
|||
|
|
request.session.set_expiry(60 * 60 * 24 * 7)
|
|||
|
|
return redirect('/admin/list')
|
|||
|
|
# return HttpResponse('提交成功')
|
|||
|
|
|
|||
|
|
return render(request, 'login.html', {'form': form})
|
|||
|
|
|
|||
|
|
|
|||
|
|
""" 生成图片验证码 """
|
|||
|
|
|
|||
|
|
|
|||
|
|
def image_code(request):
|
|||
|
|
# 生成图片验证码图像和字符串
|
|||
|
|
img, code_str = check_code()
|
|||
|
|
|
|||
|
|
# 把验证码写入到session中
|
|||
|
|
request.session['img_code'] = code_str
|
|||
|
|
request.session.set_expiry(60) # 设置session变量的60s超时
|
|||
|
|
|
|||
|
|
# 写入内存
|
|||
|
|
stream = BytesIO() # 在内存中生成文件
|
|||
|
|
img.save(stream, 'png') # 把生成的img验证码写入到内存文件中
|
|||
|
|
|
|||
|
|
return HttpResponse(stream.getvalue())
|
|||
|
|
|
|||
|
|
# 4. 写入内存（Python2）
|
|||
|
|
# import StringIO
|
|||
|
|
# stream = StringIO.StringIO()
|
|||
|
|
# img.save(stream, 'png')
|
|||
|
|
# stream.getvalue()
|
|||
|
|
|
|||
|
|
|
|||
|
|
""" 注销用户 """
|
|||
|
|
|
|||
|
|
|
|||
|
|
def loginout(request):
|
|||
|
|
request.session.clear()
|
|||
|
|
return redirect('/login/')
|