From e11f60ade21caf94a7350969c66725450079e5e4 Mon Sep 17 00:00:00 2001
From: zhenchaozhu <lhuflying@gmail.com>
Date: Mon, 28 Nov 2016 20:32:28 +0800
Subject: [PATCH] m
---
decrators.py | 0
homepage/views.py | 20 ++++++++++++++-
middlewares/session_middleware.py | 54 +++++++++++++++++++++++++++++++++++++++
weapp_sys/settings.py | 4 ++-
4 files changed, 76 insertions(+), 2 deletions(-)
create mode 100644 decrators.py
create mode 100644 middlewares/session_middleware.py
diff --git a/decrators.py b/decrators.py
new file mode 100644
index 0000000..e69de29
diff --git a/homepage/views.py b/homepage/views.py
index b5dd761..11ac426 100644
--- a/homepage/views.py
+++ b/homepage/views.py
@@ -10,6 +10,7 @@ from django.contrib.auth import get_user_model
from django.shortcuts import render_to_response
from django.template import RequestContext
from django.template.context_processors import csrf
+from django.conf import settings
@login_required
def homepage(request):
@@ -31,7 +32,24 @@ def mylogin(request):
postdata = request.POST
username = postdata.get('username','')
password = postdata.get('password','')
- user = auth.authenticate(username=username, password=password)
+ post_params = {
+ 'comefrom': 2,
+ 'user_name': username,
+ 'password': password,
+ }
+ resp = request.post(settings.AUTH_DOMAIN, data=post_params, verify=False)
+ if resp.status_code == 200:
+ rst = resp.json()
+ if rst.get('status') == 1:
+ data = rst.get('data')
+ token = data.get('token')
+ suid = data.get('1000')
+ t = HttpResponseRedirect('/admin/')
+ t.set_cookie('pu', username, 864000)
+ t.set_cookie(('pt'), )
+
+ else:
+ pass
if user:
auth.login(request, user)
t = HttpResponseRedirect('/admin/')
diff --git a/middlewares/session_middleware.py b/middlewares/session_middleware.py
new file mode 100644
index 0000000..353be7b
--- /dev/null
+++ b/middlewares/session_middleware.py
@@ -0,0 +1,54 @@
+# coding: utf-8
+
+import requests
+from django.conf import settings
+from django.core.cache import caches
+from django.contrib.auth import get_user_model
+from django.contrib.auth.models import AnonymousUser
+
+class SessionWithoutLocalUserMiddleware(object):
+ """
+ 统一权限（认证）中间件，Django系统本地不保存用户的情况使用
+ """
+
+ def __init__(self):
+ self.cache_alias = settings.CACHE_MIDDLEWARE_ALIAS
+ self.cache = caches[self.cache_alias]
+ self.UserModel = get_user_model()
+
+ def process_request(self, request):
+ if hasattr(request, "user") and getattr(request.user, "is_superuser", False):
+ # 对于Django系统的admin用户，这里不做任何处理
+ pass
+ else:
+ pt = request.COOKIES.get('pt')
+ pu = request.COOKIES.get('pu')
+ if pt and pu:
+ # 能拿到统一认证session的情况，优先从缓存中拿用户
+ user = self.cache.get(pu)
+ if not user:
+ # 如果缓存未命中，则直接调用统一权限，查询当前session的状态，构造用户，并存入缓存
+ user_info = ''
+
+ manager = Manager()
+ user_info = manager.get_user_info(request)
+ if user_info is None:
+ # 查询session状态失败的情况，构造匿名用户
+ user = AnonymousUser()
+ else:
+ # 查询session状态成功的情况，构造QCCRUser
+ user = user_info
+ self.cache.set(pt, user, 60)
+ request.user = user
+ else:
+ # 拿不到统一认证的session，将当前用户设为匿名用户
+ request.user = AnonymousUser()
+
+
+class Manager(object):
+
+ def __init__(self):
+ self.auth_domain = 'https://api.xiuyetang.com/sys/user/login'
+
+ def get_user_info(self, request):
+ pass
\ No newline at end of file
diff --git a/weapp_sys/settings.py b/weapp_sys/settings.py
index b2250ac..20792c3 100644
--- a/weapp_sys/settings.py
+++ b/weapp_sys/settings.py
@@ -135,4 +135,6 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
MEDIA_ROOT = os.path.join(BASE_DIR, 'media')
MEDIA_URL = '/media/'
-LOGIN_URL = '/login/'
\ No newline at end of file
+LOGIN_URL = '/login/'
+
+AUTH_DOMAIN = 'https://api.xiuyetang.com/sys/user/login'
\ No newline at end of file
--
2.0.0