如何使用django tastypie的api密钥认证?

时间:2013-02-03 10:03:06

标签: django authentication tastypie

来自tastypie教程:

from django.contrib.auth.models import User
from django.db import models
from tastypie.models import create_api_key

models.signals.post_save.connect(create_api_key, sender=User)

教程说:

  

“Tastypie包含一个可用于自动创建ApiKey对象的信号功能。”

我不知道在哪里放这个代码,请帮忙。

1 个答案:

答案 0 :(得分:0)

您可以将此代码放在相关应用的models.py文件中。或者,您也可以将其放在应用目录下的signals.py中 - 还要记住应用的import signals文件中的__init__.py

此代码的作用是使用signals,每次创建User时,系统都会自动为此用户[source]创建一个HMAC API密钥:

class ApiKey(models.Model):
    user = models.OneToOneField(User, related_name='api_key')
    key = models.CharField(max_length=256, blank=True, default='')
    created = models.DateTimeField(default=datetime.datetime.now)

    def __unicode__(self):
        return u"%s for %s" % (self.key, self.user)

    def save(self, *args, **kwargs):
        if not self.key:
            self.key = self.generate_key()

        return super(ApiKey, self).save(*args, **kwargs)

    def generate_key(self):
        # Get a random UUID.
        new_uuid = uuid.uuid4()
        # Hmac that beast.
        return hmac.new(str(new_uuid), digestmod=sha1).hexdigest()


def create_api_key(sender, **kwargs):
    """
    A signal for hooking up automatic ``ApiKey`` creation.
    """
    if kwargs.get('created') is True:
        ApiKey.objects.create(user=kwargs.get('instance'))