django- authentication

sunjin·2023년 4월 12일

Django

목록 보기

12/12

로그인, 로그아웃, 회원가입, 회원탈퇴 기능을 구현해보자

사전 준비

accounts app 생성하기
urls 분리하기
custom user model 대체하기

# accounts/models.py

from django.db import models
from django.contrib.auth.models import AbstractUser

# Create your models here.
class User(AbstractUser):
    pass

# settings.py

AUTH_USER_MODEL = 'accounts.User' # 기본 값 'auth.User'

# accounts/admin.py

from django.contrib import admin

# Register your models here.
from django.contrib.auth.admin import UserAdmin
from .models import User


admin.site.register(User, UserAdmin)

session을 create하는 과정

# accounts/urls.py

path('login/', views.login, name='login'),

# accounts/views.py
from django.contrib.auth.forms import AuthenticationForm
from django.contrib.auth import login as auth_login

def login(request):
    if request.method == 'POST':
        form = AuthenticationForm(request, request.POST)
        if form.is_valid():
            auth_login(request, form.get_user())
            return redirect('articles:index')
    else:
        form = AuthenticationForm()
    context = {
        'form': form,
    }
    return render(request, 'accounts/login.html', context)

# accounts/login.html

<body>
  <h1>로그인</h1>
  <form action="{% url 'accounts:login' %}" method="POST">
    {% csrf_token %}
    {{ form.as_p }}
    <input type="submit">
  </form>
</body>

logout

session을 delete하는 과정

# accounts/urls.py

path('logout/', views.logout, name='logout'),

# accounts/views.py

def logout(request):
    auth_logout(request)
    return redirect('articles:index')

# article/index.html

<body>
<form action="{% url 'accounts:logout' %}" method="POST">
      {% csrf_token %}
      <input type="submit" value="Logout">
    </form>
</body>

로그인 된 유저 정보 출력

 <h3>안녕하세요, {{ user }} 님!</h3>

회원가입

User 객체를 create 하는 것

# accounts/urls.py

path('signup/', views.signup, name='signup'),

커스텀 form 작성 (changeform_filed도 수정)

from django.contrib.auth import get_user_model
from django.contrib.auth.forms import UserCreationForm, UserChangeForm

class CustomUserCreationForm(UserCreationForm):
    class Meta(UserCreationForm.Meta):
        # 현재 우리가 사용하는 User class로 재정의
        model = get_user_model()


class CustomUserChangeForm(UserChangeForm):
    class Meta(UserChangeForm.Meta):
        model = get_user_model()
        fields = ('email', 'first_name', 'last_name',)

# accounts/views.py
from .forms import CustomUserCreationForm, CustomUserChangeForm

def signup(request):
    if request.method == 'POST':
        form = CustomUserCreationForm(request.POST)
        if form.is_valid():
            form.save()
            return redirect('articles:index')
    else:
        form = CustomUserCreationForm()
    context = {
        'form': form,
    }
    return render(request, 'accounts/signup.html', context)

참고 : 회원가입 후 로그인 까지 진행

# accounts/views.py
from .forms import CustomUserCreationForm, CustomUserChangeForm

def signup(request):
    if request.method == 'POST':
        form = CustomUserCreationForm(request.POST)
        if form.is_valid():
            user = form.save()
            auth_login(request,user)
            return redirect('articles:index')
    else:
        form = CustomUserCreationForm()
    context = {
        'form': form,
    }
    return render(request, 'accounts/signup.html', context)

# signup.html

  <h1>회원가입</h1>
  <form action="{% url 'accounts:signup' %}" method="POST">
    {% csrf_token %}
    {{ form.as_p }}
    <input type="submit">
  </form>

회원 탈퇴

User 객체를 delete하는 것

# accounts/urls.py

 path('delete/', views.delete, name='delete'),

# accounts/views.py

def delete(request):
    # print(dir(request.user))
    request.user.delete()
    return redirect('articles:index')

# index.html

 <form action="{% url 'accounts:delete' %}" method="POST">
      {% csrf_token %}
      <input type="submit" value="회원탈퇴">
    </form>

회원정보 수정

# accounts/urls.py

path('update/', views.update, name='update'),

# accounts/views.py
from .forms import CustomUserCreationForm, CustomUserChangeForm

def update(request):
    if request.method == 'POST':
        form = CustomUserChangeForm(request.POST, instance=request.user)
        if form.is_valid():
            form.save()
            return redirect('articles:index')
    else:
        form = CustomUserChangeForm(instance=request.user)
    context = {
        'form': form,
    }
    return render(request, 'accounts/update.html', context)

# accounts/update.html

  <h1>회원정보 수정</h1>
  <form action="{% url 'accounts:update' %}" method="POST">
    {% csrf_token %}
    {{ form.as_p }}
    <input type="submit">
  </form>

비밀번호 변경

# accounts/urls.py

 path('password/', views.change_password, name='change_password'),

# accounts/views.py
from django.contrib.auth.forms import AuthenticationForm, PasswordChangeForm
from django.contrib.auth import update_session_auth_hash

def change_password(request):
    if request.method == 'POST':
        form = PasswordChangeForm(request.user, request.POST)
        if form.is_valid():
            user = form.save()
            # 비밀번호 변경시 세션 무효화 방지
            update_session_auth_hash(request, user)
            return redirect('articles:index')
    else:
        form = PasswordChangeForm(request.user)
    context = {
        'form': form,
    }
    return render(request, 'accounts/change_password.html', context)

update_session_auth_hash : 암호 변경시 세션 무효화 방지
암호가 변경되어도 로그아웃 되지 않도록 새로운 Password의 session data로 기존 session을 업데이트

# change_password.html
  <h1>비밀번호 변경</h1>
  <form action="{% url 'accounts:change_password' %}" method="POST">
    {% csrf_token %}
    {{ form.as_p }}
    <input type="submit">
  </form>

로그인 사용자 접근

is_authenticated

사용자가 인증 되었는지 여부를 알 수 있는 User model의 속성

로그인과 비로그인 상태 출력링크 다르게 설정하기

# article/index.html
{% if request.user.is_authenticated %}
    <h3>안녕하세요, {{ user }} 님!</h3>
    <form action="{% url 'accounts:logout' %}" method="POST">
      {% csrf_token %}
      <input type="submit" value="Logout">
    </form>
    <form action="{% url 'accounts:delete' %}" method="POST">
      {% csrf_token %}
      <input type="submit" value="회원탈퇴">
    </form>
    <a href="{% url 'accounts:update' %}">회원정보수정</a>
  {% else %}
    <a href="{% url 'accounts:login' %}">Login</a>
    <a href="{% url 'accounts:signup' %}">Signup</a>
  {% endif %}

views.py 함수에 적용하기

def login(request):
    if request.user.is_authenticated:
        return redirect('articles:index')
        ...
        
def signup(request):
    if request.user.is_authenticated:
        return redirect('articles:index')   
        ...

login_required

인증된 사용자에 대해서만 view 함수를 실행 시키는 데코레이션

from django.contrib.auth.decorators import login_required

@login_required
def logout(request):
    ...
@login_required
def update(request):
 	...

sunjin

🍀

이전 포스트

django- authentication

Django

사전 준비

logout

로그인 된 유저 정보 출력

회원가입

커스텀 form 작성 (changeform_filed도 수정)

회원 탈퇴

회원정보 수정

비밀번호 변경

로그인 사용자 접근

is_authenticated

login_required

django_form

0개의 댓글