通过在DRF(Django Rest Framework)中扩展用户模型进行身份验证

Question

我已经有一个使用 django 默认 User 类的工作 auth.token 注册，但我被要求向用户添加一个新字段，我调查了 AbtractUser、AbstractBaseUser 等。我认为最好的解决方案将是一对一的"方法"。

这是我试图做的：

models.py：

class Usuario(models.Model):
user = models.OneToOneField(User, on_delete = models.CASCADE)
es_tecnico = models.BooleanField(name = 'es_tecnico', default = False, blank = True)

serializers.py

class UserSerializer(serializers.ModelSerializer):
class Meta:
model = User
fields = ('username',
'password')
class UsuarioSerializer(serializers.ModelSerializer):
user = UserSerializer(required=True)
class Meta:
model = Usuario
fields = ('user',
'es_tecnico')
def create(self, validated_data):
"""
Overriding the default create method of the Model serializer.
:param validated_data: data containing all the details of student
:return: returns a successfully created student record
"""
user_data = validated_data.pop('user')
user = UserSerializer.create(UserSerializer(), validated_data=user_data)
usuario, created = Usuario.objects.update_or_create(user=user,
es_tecnico=validated_data.pop('es_tecnico'))
return usuario

views.py：

class UsuarioViewSet(viewsets.ModelViewSet):
lookup_field = 'id'
serializer_class = UsuarioSerializer
queryset = Usuario.objects.all().filter(es_tecnico = False)

class TecnicoViewSet(viewsets.ModelViewSet):
lookup_field = 'id'
serializer_class = UsuarioSerializer
queryset = Usuario.objects.all().filter(es_tecnico = True)

我想让它尽可能简单，这就是我使用命令"python3 manage.py makemigrations"时得到的：

Traceback (most recent call last):
File "manage.py", line 15, in <module>
execute_from_command_line(sys.argv)
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/management/__init__.py", line 371, in execute_from_command_line
utility.execute()
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/management/__init__.py", line 365, in execute
self.fetch_command(subcommand).run_from_argv(self.argv)
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/management/base.py", line 288, in run_from_argv
self.execute(*args, **cmd_options)
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/management/base.py", line 332, in execute
self.check()
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/management/base.py", line 364, in check
include_deployment_checks=include_deployment_checks,
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/management/base.py", line 351, in _run_checks
return checks.run_checks(**kwargs)
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/core/checks/registry.py", line 73, in run_checks
new_errors = check(app_configs=app_configs)
File "/home/stalker/PycharmProjects/ingSoft/servidor/virenv/lib/python3.5/site-packages/django/contrib/auth/checks.py", line 29, in check_user_model
if not isinstance(cls.REQUIRED_FIELDS, (list, tuple)):
AttributeError: type object 'Usuario' has no attribute 'REQUIRED_FIELDS'

当我尝试其他人堆栈溢出问题的解决方案时，出现此错误：

AttributeError: type object 'Usuario' has no attribute 'USERNAME_FIELD'

如果有一个简单的方法代替使用一对一字段，我将赞赏它

这些是我现在遇到问题的观点： views.py：

class Registrar(mixins.CreateModelMixin, viewsets.GenericViewSet):
serializer_class = UsuarioSerializer
def create(self, request, *args, **kwargs):
#  Creando un nuevo usuario
username = request.POST.get('username')
email = request.POST.get('email')
password = request.POST.get('password')
user = Usuario.objects.create_user(username, email, password)
user.save()
token = Token.objects.create(user=user)
return Response({'detail': 'El usuario fue creado con el token: ' + token.key})

class LoginView(mixins.CreateModelMixin, viewsets.GenericViewSet):
serializer_class = LoginSerializer
def create(self, request):
serializer = LoginSerializer(data=request.data)
serializer.is_valid(raise_exception=True)
user = serializer.validated_data["usuario"]
django_login(request, user)
token, created = Token.objects.get_or_create(user=user)
return Response({"token": token.key}, status=200)

Answer 1

在你的例子中，你只是在扩展 DjangoUser模型，所以你不应该覆盖AUTH_USER_MODEL。

从文件中删除settings.py行代码：AUTH_USER_MODEL = "pedidos.Usuario"，如果您想使用User模型，请在代码中使用：

from django.contrib.auth.models import User

(正如我们所说，您只是在扩展 DjangoUser模型(或者您可以使用方便的功能get_user_model()

get_user_model((：

而不是直接引用用户，你应该 使用 django.contrib.auth.get_user_model(( 引用用户模型。 此方法将返回当前活动的用户模型 – 自定义 用户模型(如果指定(或用户模型(如果指定(。

如果要获取User的属性es_tecnico，可以使用：

>>> from django.contrib.auth.models import User
>>> u = User.objects.get(username='Juan')
>>> juan_es_tecnico = u.usuario.es_tecnico

或使用get_user_model()：

>>> from django.contrib.auth import get_user_model
>>> my_user = get_user_model()
>>> u = my_user.objects.get(username='Juan')
>>> juan_es_tecnico = u.usuario.es_tecnico

编辑：

class Registrar(mixins.CreateModelMixin, viewsets.GenericViewSet):
serializer_class = UsuarioSerializer
def create(self, request, *args, **kwargs):
#  Creando un nuevo usuario
username = request.POST.get('username')
email = request.POST.get('email')
password = request.POST.get('password')
user = User.objects.create_user(username, email, password)
user.save()
token = Token.objects.create(user=user)
return Response({'detail': 'El usuario fue creado con el token: ' + token.key})

在Registrar类中使用User模型而不是Usuario。

我希望这会有所帮助。