from django.utils.decorators import method_decorator

from django.utils.decorators import method_decorator


class MyLogin(View):
	@method_decorator(auth)
	def get(self, request):
    return HttpResponse('Is from get')

	def post(self, request):
    return HttpResponse('Is from post')

from django.utils.decorators import method_decorator

@method_decorator(auth, name='get')  # 方法名
class MyLogin(View):
	def get(self, request):
    return HttpResponse('Is from get')

	def post(self, request):
    return HttpResponse('Is from post')

from django.utils.decorators import method_decorator


class MyLogin(View):
    @method_decorator(auth)
    def dispatch(self, request, *args, **kwargs):
        super.__init__()
    def get(self, request):
        return HttpResponse('Is from get')

    def post(self, request):
        return HttpResponse('Is from post')

MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]

from django.utils.deprecation import MiddlewareMixin

<form action="" method="post">
    {% csrf_token %}
    <input type="text" placeholder="用戶名">
    <input type="password" placeholder="密碼">
    <input type="submit">
</form>

<script>
    $('.btn').click(function (){
        $.ajax({

            url:'',
            type:'post',
            // 第一種方式
            // data:{'username':'jesse', 'csrfmiddlewaretoken':$('[name="csrfmiddlewaretoken"]')},
            // 第二種
            data:{'username':'jesse', 'csrfmiddlewaretoken':'{{ csrf_token }}'},
            success:function(){

            }
        })
    })
</script>

@csrf_protect

@csrf_exempt

# 如果該函數(shù)有返回的html不能再加{% csrf_token %}

createsuperuser
# 根據(jù)提示輸入密碼郵箱

from django.contrib import auth

from django.shortcuts import render, HttpResponse, redirect

# Create your views here.
from django.views import View
from django.contrib import auth

def login(request):
    if request.method == 'POST':
        username = request.POST.get('username')
        password = request.POST.get('password')
        # 利用auth模塊驗(yàn)證用戶是否合法
        '''
        1.自動(dòng)去auth_user表中進(jìn)行驗(yàn)證
        2.把密碼自動(dòng)加密進(jìn)行比對(duì)
        '''
        # 該方法驗(yàn)證正確會(huì)返回用戶對(duì)象，錯(cuò)誤會(huì)返回None
        user_obj = auth.authenticate(request, username=username, password=password)
        print(user_obj)
        if user_obj:
            auth.login(request, user_obj)  # 相當(dāng)于設(shè)置session，記錄用戶狀態(tài)
            return redirect('/home/')
    return render(request, 'login.html')

from django.contrib.auth.decorators import login_required


# 同樣的使用auth自帶的裝飾器也需要導(dǎo)入login_required

@login_required(login_url='/login/')
# 該裝飾器使用的時(shí)候需要傳 沒(méi)有登錄 返回的路由，不傳默認(rèn)訪問(wèn)自帶的地址account/login 
def func(request):
    return HttpResponse('FUNC PAGE')

is_right = request.user.check_password(old_pwd)
if is_right:
  # 判斷兩次密碼是否一致
  if new_pwd == re_pwd:
    # 修改密碼
    request.user.set_password(new_pwd)
    requesr.user.save()  # 保存到數(shù)據(jù)庫(kù)
    return redirect('/login/')

def logout(request):
  auth.logout(request)  # 清除cookie
  return redirect('/home/')

from django.contrib.auth.model import User
# 需要導(dǎo)入模塊

def register(request):
  if request.method == 'POST':
    username = request.POST.get('username')
    password = request.POST.get('password')
    User.object.create(username=username,password=password)  # 密碼是名文
    # create_user 密碼是密文

form django.contrib.auth.models import AbstractUser

class UserInfo(AbstractUser):
  phone = models.CharField(max_lenth=32)
  addr = models.CharFiled(max_lenth=32)
  # 增加字段

AUTH_USER_MODEL = 'app01.UserInfo'
# 應(yīng)用名稱.類名