DRF修改權限、使用者認證方式

修改權限、使用者認證方式

• 在settings中全局配置

  REST_FRAMEWORK = {
      'DEFAULT_AUTHENTICATION_CLASSES': [
          'rest_framework.authentication.BasicAuthentication',
          'rest_framework.authentication.SessionAuthentication',
      ]
  }           

• 基于每個視圖集進行配置

  from rest_framework.authentication import SessionAuthentication, BasicAuthentication
  from rest_framework.permissions import IsAuthenticated
  from rest_framework.response import Response
  from rest_framework.views import APIView
  
  class ExampleView(APIView):
      authentication_classes = [SessionAuthentication, BasicAuthentication]
      permission_classes = [IsAuthenticated]
  
      def get(self, request, format=None):
          content = {
              'user': unicode(request.user),  # `django.contrib.auth.User` instance.
              'auth': unicode(request.auth),  # None
          }
          return Response(content)           

• 配合

  @api_view

  裝飾器基于函數一起使用

  from rest_framework.decorators import permission_classes, authentication_classes
  class ExampleView(APIView):
  
      @api_view(['GET'])
      @authentication_classes([SessionAuthentication, BasicAuthentication])
      @permission_classes([IsAuthenticated])
      def example_view(request, format=None):
          content = {
              'user': unicode(request.user),  # `django.contrib.auth.User` instance.
              'auth': unicode(request.auth),  # None
          }
          return Response(content)           

• @action

  class ExampleView(APIView):
  
      @action(methods=['get'], detail=False, url_path='url', url_name='url', permission_classes=(IsAuthenticated,), authentication_classes=(SessionAuthentication, BasicAuthentication))
      def example_view(request, format=None):
          content = {
              'user': unicode(request.user),  # `django.contrib.auth.User` instance.
              'auth': unicode(request.auth),  # None
          }
          return Response(content)           

參考連結：

• django-rest-framework
• DRF修改權限、使用者認證方式