39 lines
1.1 KiB
Python
39 lines
1.1 KiB
Python
|
# -*- coding: utf-8 -*-
|
|||
|
|
"""
|
|||
|
|
DRF 自定义认证后端：从 Cookie 中读取 auth_token 校验。
|
|||
|
|
"""
|
|||
|
|
from rest_framework.authentication import BaseAuthentication
|
|||
|
|
from rest_framework.exceptions import AuthenticationFailed
|
|||
|
|
|
|||
|
|
|
|||
|
|
class TokenUser:
|
|||
|
|
"""轻量用户对象（不依赖 Django auth 模块）。"""
|
|||
|
|
|
|||
|
|
def __init__(self, username: str):
|
|||
|
|
self.username = username
|
|||
|
|
self.is_authenticated = True
|
|||
|
|
|
|||
|
|
def __str__(self):
|
|||
|
|
return self.username
|
|||
|
|
|
|||
|
|
|
|||
|
|
class CookieTokenAuthentication(BaseAuthentication):
|
|||
|
|
"""
|
|||
|
|
从请求 Cookie 中读取 auth_token，查数据库校验。
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
def authenticate(self, request):
|
|||
|
|
token = request.COOKIES.get("auth_token")
|
|||
|
|
if not token:
|
|||
|
|
return None # 未携带 token，交给权限类处理
|
|||
|
|
|
|||
|
|
# 延迟导入避免循环依赖
|
|||
|
|
from server.models import AuthToken
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
row = AuthToken.objects.get(token=token)
|
|||
|
|
except AuthToken.DoesNotExist:
|
|||
|
|
raise AuthenticationFailed("登录已失效，请重新登录")
|
|||
|
|
|
|||
|
|
return (TokenUser(row.username), token)
|