/api/logout 'AnonymousUser' 对象的 AttributeError 没有属性 'auth_token'

Question

我已成功部署登录视图并返回令牌，但是当我尝试注销时，它返回以下错误。我是新手，所以无法弄清楚原因。

这些是我的登录和注销视图。

class LoginUserView(GenericAPIView):
    permission_classes = [AllowAny]
    serializer_class = UserLoginSerializer

def post(self, request, *args, **kwargs):
    data = request.data
    serializer = UserLoginSerializer(data=data)
    serializer.is_valid(raise_exception=True)
    new_data = serializer.data
    user = serializer.validated_data["user"]
    token, created = Token.objects.get_or_create(user=user)
    #return response.Response(new_data, status=status.HTTP_200_OK)
    return response.Response({"token": token.key},   status=status.HTTP_200_OK)
    # return response.Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)

class Logout(GenericAPIView):
    def get(self, request, format=None):
        # simply delete the token to force a login
        request.user.auth_token.delete()
        return Response(status=status.HTTP_200_OK)

Answer 1

当用户未正确验证时，您的问题就来了。使用request.is_authenticated 检查用户是否已通过身份验证。如果您已登录并且出现此错误，则意味着您的登录系统不正确，因为 Django 告诉 request.user 是 AnonymousUser，这是没有人登录时 Django 使用的“用户”。

class Logout(GenericAPIView):
    def get(self, request, format=None):
        # simply delete the token to force a login
        if request.is_authenticated():
            request.user.auth_token.delete()
        return Response(status=status.HTTP_200_OK)

Answer 2

你需要设置permission_classes类

from rest_framework.generics import GenericAPIView
from rest_framework.permissions import IsAuthenticated


class Logout(GenericAPIView):
    permission_classes = [IsAuthenticated]
    authentication_classes = [YourAuthClass] 

    def get(self, request, format=None):
        # simply delete the token to force a login
        request.user.auth_token.delete()
        return Response(status=status.HTTP_200_OK)

注意：如果您没有设置默认类，您可能还需要设置authentication_classes。