權(quán)限組件的源碼執(zhí)行過(guò)程和之前的認(rèn)證組件是相同的,如下:
成都創(chuàng)新互聯(lián)公司專(zhuān)業(yè)為企業(yè)提供楚雄州網(wǎng)站建設(shè)、楚雄州做網(wǎng)站、楚雄州網(wǎng)站設(shè)計(jì)、楚雄州網(wǎng)站制作等企業(yè)網(wǎng)站建設(shè)、網(wǎng)頁(yè)設(shè)計(jì)與制作、楚雄州企業(yè)網(wǎng)站模板建站服務(wù),10余年楚雄州做網(wǎng)站經(jīng)驗(yàn),不只是建網(wǎng)站,更提供有價(jià)值的思路和整體網(wǎng)絡(luò)服務(wù)。
self.check_permissions(request)
def check_permissions(self, request):
"""
Check if the request should be permitted.
Raises an appropriate exception if the request is not permitted.
"""
for permission in self.get_permissions():
if not permission.has_permission(request, self):
self.permission_denied(
request, message=getattr(permission, 'message', None)
)
思考:如果要做權(quán)限認(rèn)證,我們首先要知道當(dāng)前登錄的用戶(hù)是誰(shuí),那么我們?nèi)绾沃滥兀?br/>首先rest_framework中的三個(gè)組件是按順序執(zhí)行的:
#認(rèn)證組件 self.perform_authentication(request) #權(quán)限組件 self.check_permissions(request) #頻率組件 self.check_throttles(request)
在第一個(gè)執(zhí)行的認(rèn)證組件源碼中有這樣一段代碼
self.user, self.auth = user_auth_tuple
這個(gè)user_auth_tuple恰巧就是我們自定義認(rèn)證視圖時(shí)返回的那個(gè)元祖
class TokenAuth(BaseAuthentication): def authenticate(self, request): ...... return token_obj.user, token_obj.token #需要返回一個(gè)元組
因此此時(shí)的self.user=token_obj.user,self.auth=token_obj.token
在app01.service.permissions.py中:
from rest_framework.permissions import BasePermission
class SVIPPermission(BasePermission):
message = "SVIP才能訪(fǎng)問(wèn)" #沒(méi)通過(guò)驗(yàn)證則返回錯(cuò)誤
def has_permission(self, request, view): #固定寫(xiě)法
if request.user.user_type == 3:
return True
return False
在views.py:
class AuthorView(viewsets.ModelViewSet):
authentication_classes = [TokenAuth,]
permission_classes = [SVIPPermission,]
queryset = Author.objects.all()
serializer_class = AuthorModelSerializers
REST_FRAMEWORK={
"DEFAULT_AUTHENTICATION_CLASSES":["app01.service.auth.Authentication",],
"DEFAULT_PERMISSION_CLASSES":["app01.service.permissions.SVIPPermission",]
}
self.check_throttles(request)
def check_throttles(self, request):
"""
Check if request should be throttled.
Raises an appropriate exception if the request is throttled.
"""
for throttle in self.get_throttles():
if not throttle.allow_request(request, self):
self.throttled(request, throttle.wait())
在app01.service.throttles.py中:
from rest_framework.throttling import BaseThrottle
class VisitThrottle(BaseThrottle):
def allow_request(self,request,view):
if 1:
return True
return False
在views.py中:
from app01.service.throttles import *
class BookViewSet(generics.ListCreateAPIView):
throttle_classes = [VisitThrottle,]
queryset = Book.objects.all()
serializer_class = BookSerializers
REST_FRAMEWORK={
"DEFAULT_AUTHENTICATION_CLASSES":["app01.service.auth.Authentication",],
"DEFAULT_PERMISSION_CLASSES":["app01.service.permissions.SVIPPermission",],
"DEFAULT_THROTTLE_CLASSES":["app01.service.throttles.VisitThrottle",]
}
https://www.cnblogs.com/yuanchenqi/articles/8719520.html#_label3
解析器是將接收到的數(shù)據(jù)轉(zhuǎn)換為我們所需要的數(shù)據(jù)類(lèi)型,是反序列化的過(guò)程,例如將前端傳過(guò)來(lái)的JSON解析為字典,rest_framework可以直接從request.data中取出反序列化后的JSON數(shù)據(jù),依賴(lài)的就是解析器
from rest_framework.parsers import JSONParser,FormParser
class PublishViewSet(generics.ListCreateAPIView):
parser_classes = [FormParser,JSONParser] #只寫(xiě)了兩種解析器,默認(rèn)有三種
queryset = Publish.objects.all()
serializer_class = PublshSerializers
def post(self, request, *args, **kwargs):
print("request.data",request.data)
return self.create(request, *args, **kwargs)
REST_FRAMEWORK={
"DEFAULT_AUTHENTICATION_CLASSES":["app01.service.auth.Authentication",],
"DEFAULT_PERMISSION_CLASSES":["app01.service.permissions.SVIPPermission",],
"DEFAULT_THROTTLE_CLASSES":["app01.service.throttles.VisitThrottle",],
"DEFAULT_THROTTLE_RATES":{
"visit_rate":"5/m",
},
"DEFAULT_PARSER_CLASSES":['rest_framework.parsers.FormParser',]
}
如果我們自己不設(shè)置parser_classes那么就會(huì)去父類(lèi)中找
parser_classes = api_settings.DEFAULT_PARSER_CLASSES
而父類(lèi)中的默認(rèn)設(shè)置已經(jīng)包含了常用的三種解析,包括解析JSON數(shù)據(jù)和urlencoded數(shù)據(jù)等,因此這里不太需要修改
'DEFAULT_PARSER_CLASSES': ( 'rest_framework.parsers.JSONParser', 'rest_framework.parsers.FormParser', 'rest_framework.parsers.MultiPartParser' ),
思考:在實(shí)際開(kāi)發(fā)過(guò)程中,如果我們需要解析一個(gè)特殊的數(shù)據(jù)類(lèi)型,那么可以自己寫(xiě)一個(gè)解析器(類(lèi)),然后加到parser_classes = []中,這樣就可以在request.data中直接取出這種特殊數(shù)據(jù)類(lèi)型反序列化后的結(jié)果了
進(jìn)一步封裝url
我們知道下面兩條url都針對(duì)一個(gè)視圖類(lèi),但每個(gè)表這寫(xiě)兩條url的話(huà)就會(huì)造成代碼重復(fù),因?yàn)椴煌淼拿織lurl只有視圖類(lèi)的名字和反向解析的名字有區(qū)別而已,這里可以進(jìn)一步封裝
url(r'^authors/$', views.AuthorView.as_view({"get": "list", "post": "create"}), name="author"),
url(r'^authors/(?P<pk>\d+)/$', views.AuthorModelView.as_view({"get":"retrieve","put":"update","delete":"destroy"}),name="detailauthor"),
class AuthorView(viewsets.ModelViewSet):
queryset = Author.objects.all()
serializer_class = AuthorModelSerializers
from rest_framework import routers
from django.conf.urls import include
from app01 import views
router = routers.DefaultRouter() #實(shí)例化一個(gè)對(duì)象
router.register(r'authors', views.AuthorView) #注冊(cè),前面寫(xiě)表名,后面寫(xiě)視圖類(lèi)的名字
urlpatterns = [
url(r'^admin/', admin.site.urls),
url('', include(router.urls)),
]
再訪(fǎng)問(wèn)就會(huì)自動(dòng)生成四條url
^authors/$ [name='author-list']
^authors\.(?P<format>[a-z0-9]+)/?$ [name='author-list']
^authors/(?P<pk>[^/.]+)/$ [name='author-detail']
^authors/(?P<pk>[^/.]+)\.(?P<format>[a-z0-9]+)/?$ [name='author-detail']
from rest_framework.pagination import PageNumberPagination, LimitOffsetPagination
class PNPagination(PageNumberPagination):
page_size = 2 #默認(rèn)每頁(yè)顯示幾條
page_query_param = 'page' #url上get請(qǐng)求時(shí)的關(guān)鍵字,表示第幾頁(yè) ?page=2
page_size_query_param = 'size' #url關(guān)鍵字,臨時(shí)設(shè)置每頁(yè)顯示幾條,與默認(rèn)區(qū)分 ?size=2
max_page_size = 3 #用于限制page_size_query_param的最大值,即每頁(yè)顯示條數(shù)最多不能超過(guò)這個(gè)限制
class MyLimitOffsetPagination(LimitOffsetPagination):
default_limit = 3 #默認(rèn)顯示幾條數(shù)據(jù)
limit_query_param = 'limit' #url關(guān)鍵字,臨時(shí)設(shè)置每頁(yè)顯示幾條數(shù)據(jù)
offset_query_param = 'offset' #url關(guān)鍵字,偏移,默認(rèn)從0開(kāi)始,與limit可以配合
class BookView(APIView):
def get(self, request):
book_list = Book.objects.all()
# 分頁(yè)
pnp = MyLimitOffsetPagination()
pager_books = pnp.paginate_queryset(book_list, request, self)
ret = BookModelSerializers(pager_books, many=True, context={'request': request})
# 此處的Response來(lái)自rest_framework
return Response(ret.data)
class AuthorView(viewsets.ModelViewSet):
queryset = Author.objects.all()
serializer_class = AuthorModelSerializers
pagination_class = MyLimitOffsetPagination #定義分頁(yè)器類(lèi)
返回值
{
"count": 4, #數(shù)據(jù)總數(shù)
"next": "http://127.0.0.1:8000/authors/?page=2", #下一頁(yè)的url
"previous": null,
......
}
每頁(yè)顯示一條數(shù)據(jù)的同時(shí),從第一條數(shù)據(jù)開(kāi)始向右偏移兩條數(shù)據(jù),顯示結(jié)果是第三條數(shù)據(jù)
http://127.0.0.1:8000/books/?limit=1&offset=2
每頁(yè)顯示兩條數(shù)據(jù)的同時(shí),從第一條數(shù)據(jù)開(kāi)始向右偏移兩條數(shù)據(jù),顯示結(jié)果是第三第四條數(shù)據(jù)
http://127.0.0.1:8000/books/?limit=2&offset=2
網(wǎng)站題目:DjangoREST_framework框架03
鏈接URL:http://vcdvsql.cn/article12/jhiedc.html
成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián),為您提供外貿(mào)網(wǎng)站建設(shè)、云服務(wù)器、商城網(wǎng)站、標(biāo)簽優(yōu)化、搜索引擎優(yōu)化、網(wǎng)頁(yè)設(shè)計(jì)公司
聲明:本網(wǎng)站發(fā)布的內(nèi)容(圖片、視頻和文字)以用戶(hù)投稿、用戶(hù)轉(zhuǎn)載內(nèi)容為主,如果涉及侵權(quán)請(qǐng)盡快告知,我們將會(huì)在第一時(shí)間刪除。文章觀(guān)點(diǎn)不代表本網(wǎng)站立場(chǎng),如需處理請(qǐng)聯(lián)系客服。電話(huà):028-86922220;郵箱:631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載,或轉(zhuǎn)載時(shí)需注明來(lái)源: 創(chuàng)新互聯(lián)