深入理解Django中内置的用户认证

from django.contrib import auth   #导入auth模块

 user=authenticate(username="uaername",password="password")
 
 login(HttpResponse,user)

 from django.shortcuts import render,redirect,HttpResponse
 
 from django.contrib.auth import authenticate,login
 
 def auth_view(request):
  username=request.POST.GET("usernmae")  # 获取用户名
  password=request.POST.GET("password")  # 获取用户的密码
 
  user=authenticate(username=username,password=password) # 验证用户名和密码，返回用户对象
 
  if user:      # 如果用户对象存在
   login(request,user)   # 用户登陆
   return redirect("/index/")
 
  else:
   return HttpResponse("用户名或密码错误")

 from django.shortcuts import render,redirect,HttpResponse
 
 from django.contrib.auth import authenticate,login,logout
 
 def logout_view(request):
  
  logout(request)  # 注销用户
  
  return redirect("/index/")

 def view1(request):
  
  if not request.user.is_authenticated():
   return redirect("/login/")

 from django.contrib.auth.decorators import login_required
 
 @login_required
 def views(request):
  pass

from django.contrib.auth.models import User
user=User.objects.create_user(username="username",password="password")

 from django.contrib.auth.models import User
 
 user=User.objects.get(username="username")  # 获取用户对象
 user.set_password(password="password")   # 设置对象的密码
 
 user.save()

 from django.shortcuts import render,redirect,HttpResponse
 from django.contrib.auth.models import User
 
 def create_user(request):
 
  msg=None
 
  if request.method=="POST":
   username=request.POST.get("username"," ")   # 获取用户名，默认为空字符串
   password=request.POST.get("password"," ")   # 获取密码，默认为空字符串
   confirm=request.POST.get("confirm_password"," ") # 获取确认密码，默认为空字符串
 
   if password == "" or confirm=="" or username=="": # 如果用户名，密码或确认密码为空
    msg="用户名或密码不能为空"
   elif password !=confirm:       # 如果密码与确认密码不一致
    msg="两次输入的密码不一致"
   elif User.objects.filter(username=username):  # 如果数据库中已经存在这个用户名
    msg="该用户名已存在"
   else:
    new_user=User.objects.create_user(username=username,password=password) #创建新用户 
    new_user.save()
   
    return redirect("/index/")
  
  return render(request,"login.html",{"msg":msg})

 from django.shortcuts import render,redirect,HttpResponse
 from django.contrib.auth import authenticate,login,logout
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.models import User
 
 @login_required
 def change_passwd(request):
  user=request.user  # 获取用户名
  msg=None
 
  if request.method=='POST':
   old_password=request.POST.get("old_password","") # 获取原来的密码，默认为空字符串
   new_password=request.POST.get("new_password","") # 获取新密码，默认为空字符串
   confirm=request.POST.get("confirm_password","")  # 获取确认密码，默认为空字符串
 
   if user.check_password(old_password):    # 到数据库中验证旧密码通过
    if new_password or confirm:      # 新密码或确认密码为空
     msg="新密码不能为空" 
    elif new_password != confirm:     # 新密码与确认密码不一样
     msg="两次密码不一致"
 
    else:
     user.set_password(new_password)    # 修改密码
     user.save()
 
     return redirect("/index/")
   else:
    msg="旧密码输入错误"
 
  return render(request,"change_passwd.html",{"msg":msg})