Django Authentication Token，无法打开管理页面

Question

我正在尝试使用令牌身份验证来验证我的用户，问题是我不知道如何使用令牌添加标题，所以我可以进入我的管理面板。在我实现这个方法之前，如果我输入 http://127.0.0.1:8000/admin 我可以毫无问题地访问它。

这是我的models.py

class Stock(models.Model):
    ticker = models.CharField(max_length=10)
    open = models.FloatField()
    close = models.FloatField()
    volume = models.IntegerField()

    def __str__(self):
        return self.ticker


# This code is triggered whenever a new user has been created and saved to the database
@receiver(post_save, sender=settings.AUTH_USER_MODEL)
def create_auth_token(sender, instance=None, created=False, **kwargs):
    if created:
        Token.objects.create(user=instance)

这是我的views.py（我认为这是我必须改变一些东西）：

@api_view(['GET', 'POST'])
def stock_list(request, format=None):
    if request.method == 'GET':
        stocks = Stock.objects.all()
        serializer = StockSerializer(stocks, many=True)
        return Response(serializer.data)

    elif request.method == 'POST':
        serializer = StockSerializer(data=request.data)
        if serializer.is_valid():
            serializer.save()
            return Response(serializer.data, status=status.HTTP_201_CREATED)
        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)


@api_view(['GET', 'POST', 'DELETE'])
def stock_detail(request, pk, format=None):
    try:
        stock = Stock.objects.get(pk=pk)
    except Stock.DoesNotExist:
        return Response(status=status.HTTP_404_NOT_FOUND)

    if request.method == 'GET':
        serializer = StockSerializer(stock)
        return Response(serializer.data)

    elif request.method == 'PUT':
        serializer = StockSerializer(stock, data=request.data)
        if serializer.is_valid():
            serializer.save()
            return Response(serializer.data)
        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)

    elif request.method == 'DELETE':
        stock.delete()
        return Response(status=status.HTTP_204_NO_CONTENT)

这是我的网址应用程序：

urlpatterns = [
    url(r'^stocks/$', views.stock_list),
    url(r'^stocks/(?P<pk>[0-9]+)$', views.stock_detail),

]

urlpatterns = format_suffix_patterns(urlpatterns)

这是我的 url 项目：

urlpatterns = [
    url(r'^', include('companies.urls')),
    url(r'^api-token-auth/', views.obtain_auth_token),
]

我知道令牌是在用户注册时创建的，如果我输入：

curl --data "username=admin&password=password" http://127.0.0.1:8000/api-token-auth/

我获得了管理员的令牌，知道如何添加带有令牌的标头吗？

Answer 1

添加标头的确切方法将根据您提出请求的方式而改变 但 bewlo 行应包含在标题中以验证用户

Authorization:Token <token>

确保您已将 'rest_framework.authentication.TokenAuthentication' 包含在您的 DEFAULT_AUTHENTICATION_CLASSES 的其余框架中

EX.

示例 curl 请求：

curl -X GET http://127.0.0.1:8000/api/example/ -H 'Authorization: Token <token>'

在python脚本中你可以执行以下命令：

import requests

headers = {
    'content-type': "application/json",
    'authorization': "Token <token>",
    }

response = requests.request("<request-typle>", <url>, data=<payload-if-any>, headers=headers)  # while making nay request you need to mention headers as dictionary and `authorization` key to specify token

如果你正在编写测试，那么你可以这样写：

self.client.credentials(HTTP_AUTHORIZATION='Token ' + <token>)

阅读this线程中的详细信息