朱振超 / forum

Browse Code »

Commit c323519dd4538463109e4b588e0f727fb269575a

Authored by zhenchaozhu 2016-11-29 19:17:57 +0800

1 parent b6c4f3cc38

Exists in de

m

Showing 6 changed files with 264 additions and 14 deletions Show diff stats

decrators.py

Diff comments View file @c323519

File was created	1	# coding: utf-8
	2
	3	import django.http
	4	from functools import wraps
	5	from django.conf import settings
	6	from django.utils.decorators import available_attrs
	7	from django.shortcuts import resolve_url
	8	from django.utils.six.moves.urllib.parse import urlparse
	9
	10	def weapp_django_logout(request, response):
	11	assert isinstance(request, django.http.HttpRequest)
	12	assert isinstance(response, django.http.HttpResponse)
	13	# 请求统一认证登出
	14	response.delete_cookie('pt')
	15	response.delete_cookie('pu')
	16	response.delete_cookie('username')
	17	return response
	18
	19	def weapp_logout(func=weapp_django_logout):
	20	"""
	21	Django登出视图函数装饰器
	22	:param func: 处理登出逻辑的函数，接受request和response两个参数
	23	:return:
	24	"""
	25	return auth_decorator_factory(func)
	26
	27
	28	def auth_decorator_factory(func=None):
	29	"""
	30	登录登出装饰器工厂函数，允许用户自定义外部登录登出函数
	31	:param func:
	32	:return:
	33	"""
	34
	35	def decorator(view_func):
	36	@wraps(view_func)
	37	def _wrapped_view(request, args, *kwargs):
	38	response = view_func(request, args, *kwargs)
	39	if func:
	40	func(request, response)
	41	return response
	42
	43	return _wrapped_view
	44
	45	return decorator
	46
	47	import json
	48
	49	from django.http import JsonResponse
	50
	51
	52	class QCCRJsonResponse(JsonResponse):
	53	"""
	54	封装了返回码和信息的JsonResponse类
	55	"""
	56	def __init__(self, obj=None, code=200, msg="success", status=200, **kwargs):
	57	data = {"code": code, "msg": msg, "result": json.loads(obj) if isinstance(obj, (str, unicode)) else obj}
	58	super(QCCRJsonResponse, self).__init__(data=data, status=status, **kwargs)
	59
	60
	61	class QCCRErrorResponse(QCCRJsonResponse):
	62	"""
	63	请求错误
	64	"""
	65	def __init__(self, obj=None, code=400, msg="failure", status=400, **kwargs):
	66	super(QCCRErrorResponse, self).__init__(obj=obj, code=code, msg=msg, status=status, **kwargs)
	67
	68	def user_passes_test(test_func, login_url=None,
	69	redirect_field_name=getattr(settings, "QCCR_REDIRECT_FIELD_NAME", 'redirect')):
	70	"""
	71	本装饰器通过test_func函数，检查views是否通过相应的检测，未通过则跳转到登录页面；test_func函数接受user对象作为参数，通过则返回True
	72	"""
	73
	74	def decorator(view_func):
	75	@wraps(view_func, assigned=available_attrs(view_func))
	76	def _wrapped_view(request, args, *kwargs):
	77	if test_func(request.user):
	78	return view_func(request, args, *kwargs)
	79	# 如果未通过检查，且为ajax请求，返回403
	80	if request.is_ajax():
	81	return QCCRErrorResponse(code=403, msg="用户身份检查失败", status=403)
	82	# 非ajax请求，跳转到登录页面
	83	path = request.build_absolute_uri()
	84	resolved_login_url = resolve_url(login_url or getattr(settings, "QCCR_LOGIN_URL", '/login/'))
	85	login_scheme, login_netloc = urlparse(resolved_login_url)[:2]
	86	current_scheme, current_netloc = urlparse(path)[:2]
	87	if ((not login_scheme or login_scheme == current_scheme) and
	88	(not login_netloc or login_netloc == current_netloc)):
	89	path = request.get_full_path()
	90	from django.contrib.auth.views import redirect_to_login
	91	return redirect_to_login(path, resolved_login_url, redirect_field_name)
	92
	93	return _wrapped_view
	94
	95	return decorator
	96
	97
	98	def weapp_login_required(function=None,
	99	redirect_field_name=getattr(settings, "QCCR_REDIRECT_FIELD_NAME", 'redirect'),
	100	login_url=None):
	101	"""
	102	登录状态检查装饰器，如果未登录，则直接跳转到登录页面
	103	"""
	104	actual_decorator = user_passes_test(
	105	lambda u: u.is_authenticated(),
	106	login_url=login_url,
	107	redirect_field_name=redirect_field_name
	108	)
	109	if function:
	110	return actual_decorator(function)
	111	return actual_decorator

forum/forms/user.py

Diff comments View file @c323519

 # coding: utf-8
+import requests
 from django import forms
 from django.contrib.auth import authenticate
 from django.conf import settings
 from forum.models import ForumUser
 error_messages = {
     'username': {
         'required': u'必须填写用户名',
         'min_length': u'用户名长度过短（3-12个字符）',
         'max_length': u'用户名长度过长（3-12个字符）',
         'invalid': u'用户名格式错误（英文字母开头，数字，下划线构成）'
     },
     'email': {
         'required': u'必须填写E-mail',
         'min_length': u'Email长度有误',
         'max_length': u'Email长度有误',
         'invalid': u'Email地址无效'
     },
     'password': {
         'required': u'必须填写密码',
         'min_length': u'密码长度过短（6-64个字符）',
         'max_length': u'密码长度过长（6-64个字符）'
     },
 }
 class SettingPasswordForm(forms.Form):
     password_old = forms.CharField(min_length=6, max_length=64,
         error_messages=error_messages.get('password'))
     password = forms.CharField(min_length=6, max_length=64,
         error_messages=error_messages.get('password'))
     password_confirm = forms.CharField(required=False)
     def __init__(self, request):
         self.user = request.user
         super(SettingPasswordForm, self).__init__(request.POST)
     def clean(self):
         password_old = self.cleaned_data.get('password_old')
         password = self.cleaned_data.get('password')
         password_confirm = self.cleaned_data.get('password_confirm')
         if not (password_old and self.user.check_password(password_old)):
             raise forms.ValidationError(u'当前输入旧密码有误')
         if password and password_confirm and password != password_confirm:
             raise forms.ValidationError(u'两次输入新密码不一致')
         return self.cleaned_data
 class ForgotPasswordForm(forms.Form):
     username = forms.RegexField(min_length=3, max_length=12,
         regex=r'^[a-zA-Z][a-zA-Z0-9_]*$',
         error_messages=error_messages.get('username'))
     email = forms.EmailField(min_length=4, max_length=64,
         error_messages=error_messages.get('email'))
     def __init__(self, *args, **kwargs):
         self.user_cache = None
         super(ForgotPasswordForm, self).__init__(*args, **kwargs)
     def clean(self):
         username = self.cleaned_data.get('username')
         email = self.cleaned_data.get('email')
         if username and email:
             try:
                 self.user_cache = ForumUser.objects.get(username=username, email=email)
             except ForumUser.DoesNotExist:
                 raise forms.ValidationError(u'所填用户名和邮箱有误')
         return self.cleaned_data
     def get_user(self):
         return self.user_cache
 class LoginForm(forms.Form):
     username = forms.CharField(min_length=3, max_length=12,
         error_messages=error_messages.get('username'))
     password = forms.CharField(min_length=6, max_length=64,
         error_messages=error_messages.get('password'))
     def __init__(self, *args, **kwargs):
         self.user_cache = None
+        self.pu = ''
+        self.pt = ''
+        self.username = ''
         super(LoginForm, self).__init__(*args, **kwargs)
     def clean(self):
         username = self.cleaned_data.get('username')
         password = self.cleaned_data.get('password')
         if username and password:
-            self.user_cache = authenticate(username=username, password=password)
+            post_params = {
-            if self.user_cache is None:
+                'comefrom': 2,
-                raise forms.ValidationError(u'用户名或者密码不正确')
+                'user_name': username,
-            elif not self.user_cache.is_active:
+                'password': password,
-                raise forms.ValidationError(u'用户已被锁定，请联系管理员解锁')
+            }
+            resp = requests.post(settings.AUTH_DOMAIN, data=post_params, verify=False)
+            if resp.status_code == 200:
+                rst = resp.json()
+                if rst.get('status') == 1:
+                    data = rst.get('data')
+                    self.pt = data.get('token')
+                    self.pu = data.get('suid')
+                    self.username = username
+                else:
+                    raise forms.ValidationError(u'用户名或者密码不正确')
+            else:
+                raise forms.ValidationError(u'连接登录中心失败')
         return self.cleaned_data
     def get_user(self):
-        return self.user_cache
+        return {
+            'pt': self.pt,
+            'pu': self.pu,
+            'username': self.username,
+        }
 class RegisterForm(forms.ModelForm):
     username = forms.RegexField(min_length=3, max_length=12,
         regex=r'^[a-zA-Z][a-zA-Z0-9_]*$',
         error_messages=error_messages.get('username'))
     email = forms.EmailField(min_length=4, max_length=64,
         error_messages=error_messages.get('email'))
     password = forms.CharField(min_length=6, max_length=64,
         error_messages=error_messages.get('password'))
     password_confirm = forms.CharField(required=False)
     class Meta:
         model = ForumUser
         fields = ('username', 'email')
     def clean_username(self):
         username = self.cleaned_data['username']
         try:
             ForumUser.objects.get(username=username)
             raise forms.ValidationError(u'所填用户名已经被注册过')
         except ForumUser.DoesNotExist:
             if username in settings.RESERVED:
                 raise forms.ValidationError(u'用户名被保留不可用')
             return username
     def clean_email(self):
         email = self.cleaned_data['email']
         try:
             ForumUser.objects.get(email=email)
             raise forms.ValidationError(u'所填邮箱已经被注册过')
         except ForumUser.DoesNotExist:
             return email
     def clean_password_confirm(self):
         password1 = self.cleaned_data.get('password')
         password2 = self.cleaned_data.get('password_confirm')
         if password1 and password2 and password1 != password2:
             raise forms.ValidationError(u'两次输入密码不一致')
         return password2
     def save(self, commit=True):
         user = super(RegisterForm, self).save(commit=False)
         user.set_password(self.cleaned_data['password'])
         if commit:
             user.save()
         return user
 class SettingForm(forms.Form):
     username = forms.CharField() # readonly
     email = forms.EmailField() # readonly
     nickname = forms.CharField(min_length=3, max_length=12, required=False,
         error_messages={
             'min_length': u'昵称长度过短（3-12个字符）',
             'max_length': u'昵称长度过长（3-12个字符）',
         })
     signature = forms.CharField(required=False)
     location = forms.CharField(required=False)
     website = forms.URLField(required=False,
         error_messages={
             'invalid': u'请填写合法的URL地址（如：http://f2e.im）',
         })
     company = forms.CharField(required=False)
     github = forms.CharField(required=False)
     twitter = forms.CharField(required=False)
     douban = forms.CharField(required=False)
     self_intro = forms.CharField(required=False)

forum/views/user.py

Diff comments View file @c323519

1	# coding: utf-8	1	# coding: utf-8
2		2
		3	import requests
3	import os, uuid, copy, urllib	4	import os, uuid, copy, urllib
4	from PIL import Image	5	from PIL import Image
5	from django.shortcuts import render_to_response, redirect	6	from django.shortcuts import render_to_response, redirect
6	from django.contrib import auth	7	from django.contrib import auth
7	from django.contrib.auth.decorators import login_required	8	from django.contrib.auth.decorators import login_required
8	from django.template import RequestContext, Context, loader	9	from django.template import RequestContext, Context, loader
9	from django.utils import timezone	10	from django.utils import timezone
10	from django.conf import settings	11	from django.conf import settings
11	from forum.models import ForumUser	12	from forum.models import ForumUser
12	from forum.forms.user import RegisterForm, LoginForm, ForgotPasswordForm, SettingPasswordForm, SettingForm	13	from forum.forms.user import RegisterForm, LoginForm, ForgotPasswordForm, SettingPasswordForm, SettingForm
13	from common import sendmail	14	from common import sendmail
14		15
15		16
16	@login_required	17	@login_required
17	def get_setting(request, **kwargs):	18	def get_setting(request, **kwargs):
18	return render_to_response('user/setting.html', kwargs,	19	return render_to_response('user/setting.html', kwargs,
19	context_instance=RequestContext(request))	20	context_instance=RequestContext(request))
20		21
21		22
22	@login_required	23	@login_required
23	def post_setting(request):	24	def post_setting(request):
24	form = SettingForm(request.POST)	25	form = SettingForm(request.POST)
25	if not form.is_valid():	26	if not form.is_valid():
26	return get_setting(request, errors=form.errors)	27	return get_setting(request, errors=form.errors)
27		28
28	user = request.user	29	user = request.user
29	cd = copy.copy(form.cleaned_data)	30	cd = copy.copy(form.cleaned_data)
30	cd.pop('username')	31	cd.pop('username')
31	cd.pop('email')	32	cd.pop('email')
32	for k, v in cd.iteritems():	33	for k, v in cd.iteritems():
33	setattr(user, k, v)	34	setattr(user, k, v)
34	user.updated = timezone.now()	35	user.updated = timezone.now()
35	user.save()	36	user.save()
36	return get_setting(request, success_message=u'用户基本资料更新成功')	37	return get_setting(request, success_message=u'用户基本资料更新成功')
37		38
38		39
39	@login_required	40	@login_required
40	def get_setting_avatar(request, **kwargs):	41	def get_setting_avatar(request, **kwargs):
41	return render_to_response('user/setting_avatar.html', kwargs,	42	return render_to_response('user/setting_avatar.html', kwargs,
42	context_instance=RequestContext(request))	43	context_instance=RequestContext(request))
43		44
44		45
45	@login_required	46	@login_required
46	def post_setting_avatar(request):	47	def post_setting_avatar(request):
47	if not 'avatar' in request.FILES:	48	if not 'avatar' in request.FILES:
48	errors = {'invalid_avatar': [u'请先选择要上传的头像'],}	49	errors = {'invalid_avatar': [u'请先选择要上传的头像'],}
49	return get_setting_avatar(request, errors=errors)	50	return get_setting_avatar(request, errors=errors)
50		51
51	user = request.user	52	user = request.user
52	avatar_name = '%s' % uuid.uuid5(uuid.NAMESPACE_DNS, str(user.id))	53	avatar_name = '%s' % uuid.uuid5(uuid.NAMESPACE_DNS, str(user.id))
53	avatar = Image.open(request.FILES['avatar'])	54	avatar = Image.open(request.FILES['avatar'])
54		55
55	# crop avatar if it's not square	56	# crop avatar if it's not square
56	avatar_w, avatar_h = avatar.size	57	avatar_w, avatar_h = avatar.size
57	avatar_border = avatar_w if avatar_w < avatar_h else avatar_h	58	avatar_border = avatar_w if avatar_w < avatar_h else avatar_h
58	avatar_crop_region = (0, 0, avatar_border, avatar_border)	59	avatar_crop_region = (0, 0, avatar_border, avatar_border)
59	avatar = avatar.crop(avatar_crop_region)	60	avatar = avatar.crop(avatar_crop_region)
60		61
61	avatar_96x96 = avatar.resize((96, 96), Image.ANTIALIAS)	62	avatar_96x96 = avatar.resize((96, 96), Image.ANTIALIAS)
62	avatar_48x48 = avatar.resize((48, 48), Image.ANTIALIAS)	63	avatar_48x48 = avatar.resize((48, 48), Image.ANTIALIAS)
63	avatar_32x32 = avatar.resize((32, 32), Image.ANTIALIAS)	64	avatar_32x32 = avatar.resize((32, 32), Image.ANTIALIAS)
64	path = os.path.dirname(__file__)	65	path = os.path.dirname(__file__)
65	avatar_96x96.save(os.path.join(path, '../static/avatar/b_%s.png' % avatar_name), 'PNG')	66	avatar_96x96.save(os.path.join(path, '../static/avatar/b_%s.png' % avatar_name), 'PNG')
66	avatar_48x48.save(os.path.join(path, '../static/avatar/m_%s.png' % avatar_name), 'PNG')	67	avatar_48x48.save(os.path.join(path, '../static/avatar/m_%s.png' % avatar_name), 'PNG')
67	avatar_32x32.save(os.path.join(path, '../static/avatar/s_%s.png' % avatar_name), 'PNG')	68	avatar_32x32.save(os.path.join(path, '../static/avatar/s_%s.png' % avatar_name), 'PNG')
68	user.avatar = '%s.png' % avatar_name	69	user.avatar = '%s.png' % avatar_name
69	user.updated = timezone.now()	70	user.updated = timezone.now()
70	user.save()	71	user.save()
71	return get_setting_avatar(request)	72	return get_setting_avatar(request)
72		73
73		74
74	@login_required	75	@login_required
75	def get_settingpwd(request, **kwargs):	76	def get_settingpwd(request, **kwargs):
76	return render_to_response('user/setting_password.html', kwargs,	77	return render_to_response('user/setting_password.html', kwargs,
77	context_instance=RequestContext(request))	78	context_instance=RequestContext(request))
78		79
79		80
80	@login_required	81	@login_required
81	def post_settingpwd(request):	82	def post_settingpwd(request):
82	form = SettingPasswordForm(request)	83	form = SettingPasswordForm(request)
83	if not form.is_valid():	84	if not form.is_valid():
84	return get_settingpwd(request, errors=form.errors)	85	return get_settingpwd(request, errors=form.errors)
85		86
86	user = request.user	87	user = request.user
87	password = form.cleaned_data.get('password')	88	password = form.cleaned_data.get('password')
88	user.set_password(password)	89	user.set_password(password)
89	user.updated = timezone.now()	90	user.updated = timezone.now()
90	user.save()	91	user.save()
91	return get_settingpwd(request, success_message=u'您的用户密码已更新')	92	return get_settingpwd(request, success_message=u'您的用户密码已更新')
92		93
93		94
94	def get_forgotpwd(request, **kwargs):	95	def get_forgotpwd(request, **kwargs):
95	auth.logout(request)	96	auth.logout(request)
96	return render_to_response('user/forgot_password.html', kwargs,	97	return render_to_response('user/forgot_password.html', kwargs,
97	context_instance=RequestContext(request))	98	context_instance=RequestContext(request))
98		99
99		100
100	def post_forgotpwd(request):	101	def post_forgotpwd(request):
101	form = ForgotPasswordForm(request.POST)	102	form = ForgotPasswordForm(request.POST)
102	if not form.is_valid():	103	if not form.is_valid():
103	return get_login(request, errors=form.errors)	104	return get_login(request, errors=form.errors)
104		105
105	user = form.get_user()	106	user = form.get_user()
106		107
107	new_password = uuid.uuid1().hex	108	new_password = uuid.uuid1().hex
108	user.set_password(new_password)	109	user.set_password(new_password)
109	user.updated = timezone.now()	110	user.updated = timezone.now()
110	user.save()	111	user.save()
111		112
112	# 给用户发送新密码	113	# 给用户发送新密码
113	mail_title = u'前端社区（F2E.im）找回密码'	114	mail_title = u'前端社区（F2E.im）找回密码'
114	var = {'email': user.email, 'new_password': new_password}	115	var = {'email': user.email, 'new_password': new_password}
115	mail_content = loader.get_template('user/forgot_password_mail.html').render(Context(var))	116	mail_content = loader.get_template('user/forgot_password_mail.html').render(Context(var))
116	sendmail(mail_title, mail_content, user.email)	117	sendmail(mail_title, mail_content, user.email)
117		118
118	return get_forgotpwd(request, success_message=u'新密码已发送至您的注册邮箱')	119	return get_forgotpwd(request, success_message=u'新密码已发送至您的注册邮箱')
119		120
120		121
121	def get_login(request, **kwargs):	122	def get_login(request, **kwargs):
122	auth.logout(request)	123	auth.logout(request)
123	return render_to_response('user/login.html', kwargs,	124	return render_to_response('user/login.html', kwargs,
124	context_instance=RequestContext(request))	125	context_instance=RequestContext(request))
125		126
126	def post_login(request):	127	def post_login(request):
127	form = LoginForm(request.POST)	128	form = LoginForm(request.POST)
128	if not form.is_valid():	129	if not form.is_valid():
129	return get_login(request, errors=form.errors)	130	return get_login(request, errors=form.errors)
130		131
131	user = form.get_user()	132	user_info = form.get_user()
132	auth.login(request, user)	133	pt = user_info.get('pt')
133		134	pu = user_info.get('pu')
134	if user.is_staff:	135	t = redirect(request.REQUEST.get('next', '/'))
135	return redirect(request.REQUEST.get('next', '/manage/admin/'))	136	t.set_cookie('pt', pt, 864000)
		137	t.set_cookie('pu', pu, 864000)
136		138
137	return redirect(request.REQUEST.get('next', '/'))	139	return t
138		140
139		141
140	def get_logout(request):	142	def get_logout(request):
141	auth.logout(request)	143	auth.logout(request)
142	return redirect(request.REQUEST.get('next', '/'))	144	return redirect(request.REQUEST.get('next', '/'))
143		145
144		146
145	def get_register(request, **kwargs):	147	def get_register(request, **kwargs):
146	auth.logout(request)	148	auth.logout(request)
147	return render_to_response('user/register.html', kwargs,	149	return render_to_response('user/register.html', kwargs,
148	context_instance=RequestContext(request))	150	context_instance=RequestContext(request))
149		151
150		152
151	def post_register(request):	153	def post_register(request):
152	form = RegisterForm(request.POST)	154	form = RegisterForm(request.POST)
153		155
154	if not form.is_valid():	156	if not form.is_valid():
155	return get_register(request, errors=form.errors)	157	return get_register(request, errors=form.errors)
156		158
157	user = form.save()	159	user = form.save()
158	if user:	160	if user:
159	# 注册成功，发送邮件到用户邮箱	161	# 注册成功，发送邮件到用户邮箱
160	# mail_title = u'微信小程序开发社区注册成功通知'	162	# mail_title = u'微信小程序开发社区注册成功通知'
161	# mail_content = loader.get_template('user/register_mail.html').render(Context({}))	163	# mail_content = loader.get_template('user/register_mail.html').render(Context({}))
162	# sendmail(mail_title, mail_content, user.email)	164	# sendmail(mail_title, mail_content, user.email)
163	pass	165	pass
164		166
165	return redirect(settings.LOGIN_URL)	167	return redirect(settings.LOGIN_URL)
166		168

middlewares/__init__.py

Diff comments View file @c323519

middlewares/session_middleware.py

Diff comments View file @c323519

File was created	1	# coding: utf-8
	2
	3	import requests
	4	from django.conf import settings
	5	from django.core.cache import caches
	6	from django.contrib.auth import get_user_model
	7	from django.contrib.auth.models import AnonymousUser
	8
	9
	10	class SessionWithoutLocalUserMiddleware(object):
	11	"""
	12	统一权限（认证）中间件，Django系统本地不保存用户的情况使用
	13	"""
	14
	15	def __init__(self):
	16	self.cache_alias = settings.CACHE_MIDDLEWARE_ALIAS
	17	self.cache = caches[self.cache_alias]
	18	self.UserModel = get_user_model()
	19
	20	def process_request(self, request):
	21	if hasattr(request, "user") and getattr(request.user, "is_superuser", False):
	22	# 对于Django系统的admin用户，这里不做任何处理
	23	pass
	24	else:
	25	pt = request.COOKIES.get('pt')
	26	pu = request.COOKIES.get('pu')
	27	username = request.COOKIES.get('username')
	28	if pt and pu:
	29	# 查询session状态成功的情况，构造QCCRUser
	30	user = XYTUser(username, pu, pt)
	31	request.user = user
	32	else:
	33	# 拿不到统一认证的session，将当前用户设为匿名用户
	34	request.user = AnonymousUser()
	35
	36
	37	class Manager(object):
	38
	39	def __init__(self):
	40	self.auth_domain = 'https://api.xiuyetang.com/sys/user/login'
	41
	42
	43	class XYTUser(object):
	44	id = None
	45	pk = None
	46	username = ''
	47	sessionId = ''
	48	accountNo = ''
	49	employeeName = ''
	50	employeeId = 0
	51	employeeNo = ''
	52	employeeTel = ''
	53	deptIds = ''
	54	email = ''
	55	entryTime = ''
	56	uid = ''
	57	is_staff = False
	58	is_active = False
	59	is_superuser = False
	60	_groups = ''
	61	_user_permissions = ''
	62
	63	def __init__(self, username, pu, pt):
	64	self.username = username
	65	self.id = pu
	66	self.pk = pu
	67	self.sessionId = pt
	68
	69	def __str__(self):
	70	return self.username
	71
	72	def __eq__(self, other):
	73	return self.username == other.username
	74
	75	def __ne__(self, other):
	76	return not self.__eq__(other)
	77
	78	def __hash__(self):
	79	return hash(self.username)
	80
	81	def save(self):
	82	raise NotImplementedError("Django doesn't provide a DB representation for QCCRUser. User info in LDAP.")
	83
	84	def delete(self):
	85	raise NotImplementedError("Django doesn't provide a DB representation for QCCRUser. User info in LDAP.")
	86
	87	def set_password(self, raw_password):
	88	raise NotImplementedError("Django doesn't provide a DB representation for QCCRUser. Password in LDAP.")
	89
	90	def check_password(self, raw_password):
	91	raise NotImplementedError("Django doesn't provide a DB representation for QCCRUser. Password in LDAP.")
	92
	93	def _get_groups(self):
	94	return self._groups
	95
	96	groups = property(_get_groups)
	97
	98	def _get_user_permissions(self):
	99	return self._user_permissions
	100
	101	user_permissions = property(_get_user_permissions)
	102
	103	def get_group_permissions(self, obj=None):
	104	return set()
	105
	106	@property
	107	def is_anonymous(self):
	108	return lambda: False
	109
	110	@property
	111	def is_authenticated(self):
	112	return lambda: True
	113
	114	def get_username(self):
	115	return self.username

xp/settings.py

Diff comments View file @c323519

 # coding: utf-8
 # Django settings for xp project.
 DEBUG = True
 TEMPLATE_DEBUG = DEBUG
 ADMINS = (
     # ('Your Name', 'your_email@example.com'),
 )
 MANAGERS = ADMINS
 DATABASES = {
     'default': {
         'ENGINE': 'django.db.backends.mysql', # Add 'postgresql_psycopg2', 'mysql', 'sqlite3' or 'oracle'.
         'NAME': 'forum',                      # Or path to database file if using sqlite3.
         # The following settings are not used with sqlite3:
         'USER': 'root',
-        'PASSWORD': 'nineteen',
+        'PASSWORD': 'zzc',
         'HOST': '127.0.0.1',                      # Empty for localhost through domain sockets or '127.0.0.1' for localhost through TCP.
         'PORT': '3306',                      # Set to empty string for default.
     }
 }
 # Hosts/domain names that are valid for this site; required if DEBUG is False
 # See https://docs.djangoproject.com/en/1.5/ref/settings/#allowed-hosts
 ALLOWED_HOSTS = ['*']
 # Local time zone for this installation. Choices can be found here:
 # http://en.wikipedia.org/wiki/List_of_tz_zones_by_name
 # although not all choices may be available on all operating systems.
 # In a Windows environment this must be set to your system time zone.
 TIME_ZONE = 'Asia/Shanghai'
 # Language code for this installation. All choices can be found here:
 # http://www.i18nguy.com/unicode/language-identifiers.html
 LANGUAGE_CODE = 'zh-CN'
 SITE_ID = 1
 # If you set this to False, Django will make some optimizations so as not
 # to load the internationalization machinery.
 USE_I18N = True # 只有用admin的时候需要开启
 # If you set this to False, Django will not format dates, numbers and
 # calendars according to the current locale.
 USE_L10N = False
 # If you set this to False, Django will not use timezone-aware datetimes.
 USE_TZ = False
 # Absolute filesystem path to the directory that will hold user-uploaded files.
 # Example: "/var/www/example.com/media/"
 MEDIA_ROOT = ''
 # URL that handles the media served from MEDIA_ROOT. Make sure to use a
 # trailing slash.
 # Examples: "http://example.com/media/", "http://media.example.com/"
 MEDIA_URL = ''
 # Absolute path to the directory static files should be collected to.
 # Don't put anything in this directory yourself; store your static files
 # in apps' "static/" subdirectories and in STATICFILES_DIRS.
 # Example: "/var/www/example.com/static/"
 STATIC_ROOT = ''
 # URL prefix for static files.
 # Example: "http://example.com/static/", "http://static.example.com/"
 STATIC_URL = '/static/'
 # Additional locations of static files
 STATICFILES_DIRS = (
     # Put strings here, like "/home/html/static" or "C:/www/django/static".
     # Always use forward slashes, even on Windows.
     # Don't forget to use absolute paths, not relative paths.
 )
 # List of finder classes that know how to find static files in
 # various locations.
 STATICFILES_FINDERS = (
     'django.contrib.staticfiles.finders.FileSystemFinder',
     'django.contrib.staticfiles.finders.AppDirectoriesFinder',
 #    'django.contrib.staticfiles.finders.DefaultStorageFinder',
 )
 # Make this unique, and don't share it with anybody.
 SECRET_KEY = 'h6=yzee&jze#4p1@twhksg1wg6hv%pzwomw(!o($qsly%lzlhe'
 # List of callables that know how to import templates from various sources.
 TEMPLATE_LOADERS = (
     'django.template.loaders.filesystem.Loader',
     'django.template.loaders.app_directories.Loader',
 #     'django.template.loaders.eggs.Loader',
 )
 MIDDLEWARE_CLASSES = (
     'django.middleware.common.CommonMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware', # 开启了CSRF,记得在POST表单中加{% csrf_token %},使用RequestContext
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     # Uncomment the next line for simple clickjacking protection:
     # 'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'django.middleware.cache.FetchFromCacheMiddleware', # 缓存中间件，必须放在最后
 )
 ROOT_URLCONF = 'xp.urls'
 # Python dotted path to the WSGI application used by Django's runserver.
 WSGI_APPLICATION = 'xp.wsgi.application'
 TEMPLATE_DIRS = (
     # Put strings here, like "/home/html/django_templates" or "C:/www/django/templates".
     # Always use forward slashes, even on Windows.
     # Don't forget to use absolute paths, not relative paths.
 )
 TEMPLATE_CONTEXT_PROCESSORS = ( # F2E中有current_user对象和request对象,这里设置可在模板中使用RquestContext
     'django.contrib.auth.context_processors.auth', # user对象等等
     'django.core.context_processors.request', # request对象等等
     'django.core.context_processors.static', # 在模板中使用{{ STATIC_URL }}获取静态文件路径
     'forum.context_processors.custom_proc', # 自定义模板上下文处理器
 )
 INSTALLED_APPS = (
     'django.contrib.auth',
     'django.contrib.contenttypes',
     'django.contrib.sessions',
     'django.contrib.sites',
     'django.contrib.messages',
     'django.contrib.staticfiles',
     # Uncomment the next line to enable the admin:
     'django.contrib.admin',
     # Uncomment the next line to enable admin documentation:
     # 'django.contrib.admindocs',
     'django.contrib.sitemaps', # Django sitemap framework
     'gunicorn',
     'forum',
 )
 # A sample logging configuration. The only tangible logging
 # performed by this configuration is to send an email to
 # the site admins on every HTTP 500 error when DEBUG=False.
 # See http://docs.djangoproject.com/en/dev/topics/logging for
 # more details on how to customize your logging configuration.
 LOGGING = {
     'version': 1,
     'disable_existing_loggers': False,
     'filters': {
         'require_debug_false': {
             '()': 'django.utils.log.RequireDebugFalse'
         }
     },
     'handlers': {
         'mail_admins': {
             'level': 'ERROR',
             'filters': ['require_debug_false'],
             'class': 'django.utils.log.AdminEmailHandler'
         },
         'console': {
             'level': 'DEBUG',
             'class': 'logging.StreamHandler',
         },
     },
     'loggers': {
         'django.request': {
             'handlers': ['mail_admins'],
             'level': 'ERROR',
             'propagate': True,
         },
         'django.db.backends': {
             'level': 'DEBUG',
             'handlers': ['console'],
         },
     }
 }
 #
 # CACHES = { # memcached缓存设置
 #     'default': {
 #         'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
 #         'LOCATION': '127.0.0.1:11211',
 #     }
 # }
 # SESSION_ENGINE = 'django.contrib.sessions.backends.cache' # 使用memcached存储session
+AUTH_DOMAIN = 'https://api.xiuyetang.com/service/user/login'
 # 自定义User类
 AUTH_USER_MODEL = 'forum.ForumUser'
 # 用户认证BackEnds
-# AUTHENTICATION_BACKENDS = ('forum.backends.EmailAuthBackend',)
+AUTHENTICATION_BACKENDS = ('forum.backends.EmailAuthBackend',)
 # 默认登陆uri
 LOGIN_URL = '/login/'
 # 发送邮件设置
 EMAIL_HOST = 'smtp.qq.com'
 EMAIL_PORT = 25
 EMAIL_HOST_USER= '*********'
 EMAIL_HOST_PASSWORD= '******'
 DEFAULT_FROM_EMAIL = '*********@qq.com'
 # 注册用户保留关键字，非Django设置
 RESERVED = ["user", "topic", "home", "setting", "forgot", "login", "logout", "register", "admin"]