Django 配置JWT验证

时间 2019-11-08

标签 django 配置 jwt 验证栏目 Python 繁體版

原文原文链接

1.setting.py配置前端

REST_FRAMEWORK = {
'DEFAULT_AUTHENTICATION_CLASSES': (
        'rest_framework_jwt.authentication.JSONWebTokenAuthentication',  # 配置验证方式为Token验证
    ),
}
JWT_AUTH = {
    'JWT_EXPIRATION_DELTA': datetime.timedelta(days=7),  # Token 过时时间为一周
    'JWT_ALLOW_REFRESH': False,
    'JWT_AUTH_HEADER_PREFIX': 'JWT'  # Token的头为：JWT adfefdfajei342323423
}

@staticmethod
def generate_jwt_token(user):
   """生成Jwt验证码"""
   jwt_payload_handler = api_settings.JWT_PAYLOAD_HANDLER
   jwt_encode_handler = api_settings.JWT_ENCODE_HANDLER
   payload = jwt_payload_handler(user)
   return jwt_encode_handler(payload)

token = self.generate_jwt_token(user)  # 获取Token，并返回给前端
serializer = self.get_serializer(user)
return Response({'user': serializer.data, 'token': token})

这样配置以后，用户只须要每次登录以后获取JWT验证码，而后每次前端请求的时候在请求头带JWT验证码就能够api

Authorization: JWT eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjobGciOiJIbmFtZSI6InJvb3QiLCJleHAiOjE1Q4OTMsNjc5OTImVtYWlsIjoiIn0.vvOno44OHCJODu1GV_Zq8t7MqRqJneP1Qkp--4Xklgq