Question

有一些子类继承ManageHandler，每个子类都需要进行私人检查。所以，我写private_auth并让它在__init__中进行私人检查，并在GET / POST方法之前调用它。

如果私密检查失败，则只返回404错误。但是，它不起作用。那么如何停止请求并返回错误页面？

我的代码发布在下面：

class ManageHandler(BaseHandler):

    def __init__(self, *argc, **argkw):
        super(ManageHandler, self).__init__(*argc, **argkw)
        self.private_auth()


    def private_auth(self):
        self.user = self.get_secure_cookie("user")
        self.private = self.UserModel.get_user_level_by_name(self.user)

        #not login
        if self.private == -1:
            return 

        if self.private != 4:
            self.render("404.html")
            self.finish()


    @tornado.web.authenticated
    def get(self, argkw={}):
            pass

龙卷风报告此错误。

[E 140321 02:06:04 iostream:357] Uncaught exception, closing connection.
    Traceback (most recent call last):
      File "/Library/Python/2.7/site-packages/tornado/iostream.py", line 354, in wrapper
        callback(*args)
      File "/Library/Python/2.7/site-packages/tornado/stack_context.py", line 331, in wrapped
        raise_exc_info(exc)
      File "/Library/Python/2.7/site-packages/tornado/stack_context.py", line 302, in wrapped
        ret = fn(*args, **kwargs)
      File "/Library/Python/2.7/site-packages/tornado/httpserver.py", line 328, in _on_headers
        self.request_callback(self._request)
      File "/Library/Python/2.7/site-packages/tornado/web.py", line 1651, in __call__
        handler = spec.handler_class(self, request, **spec.kwargs)
      File "/Users/tyw/Workspaces/CMPUT391/trunk/app/handlers/ManageHandler.py", line 23, in __init__
        self.private_auth()
      File "/Users/tyw/Workspaces/CMPUT391/trunk/app/handlers/ManageHandler.py", line 36, in private_auth
        self.finish()
      File "/Library/Python/2.7/site-packages/tornado/web.py", line 837, in finish
        self.flush(include_footers=True)
      File "/Library/Python/2.7/site-packages/tornado/web.py", line 784, in flush
        for transform in self._transforms:
    TypeError: 'NoneType' object is not iterable
[E 140321 02:06:04 ioloop:491] Exception in callback <functools.partial object at 0x10c63e1b0>
    Traceback (most recent call last):
      File "/Library/Python/2.7/site-packages/tornado/ioloop.py", line 477, in _run_callback
        callback()
      File "/Library/Python/2.7/site-packages/tornado/stack_context.py", line 331, in wrapped
        raise_exc_info(exc)
      File "/Library/Python/2.7/site-packages/tornado/stack_context.py", line 302, in wrapped
        ret = fn(*args, **kwargs)
      File "/Library/Python/2.7/site-packages/tornado/iostream.py", line 354, in wrapper
        callback(*args)
      File "/Library/Python/2.7/site-packages/tornado/stack_context.py", line 331, in wrapped
        raise_exc_info(exc)
      File "/Library/Python/2.7/site-packages/tornado/stack_context.py", line 302, in wrapped
        ret = fn(*args, **kwargs)
      File "/Library/Python/2.7/site-packages/tornado/httpserver.py", line 328, in _on_headers
        self.request_callback(self._request)
      File "/Library/Python/2.7/site-packages/tornado/web.py", line 1651, in __call__
        handler = spec.handler_class(self, request, **spec.kwargs)
      File "/Users/tyw/Workspaces/CMPUT391/trunk/app/handlers/ManageHandler.py", line 23, in __init__
        self.private_auth()
      File "/Users/tyw/Workspaces/CMPUT391/trunk/app/handlers/ManageHandler.py", line 36, in private_auth
        self.finish()
      File "/Library/Python/2.7/site-packages/tornado/web.py", line 837, in finish
        self.flush(include_footers=True)
      File "/Library/Python/2.7/site-packages/tornado/web.py", line 784, in flush
        for transform in self._transforms:
    TypeError: 'NoneType' object is not iterable

Answer 1

Tornado不是为RequestHandler.__init__中的身份验证和其他操作而设计的。这就是您从self.finish致电__init__时收到异常的原因：RequestHandler尚未准备好运行finish。

相反，覆盖get_current_user()。基本说明如下：

http://tornado.readthedocs.org/en/latest/web.html#tornado.web.RequestHandler.get_current_user

这里有一个例子：

http://technobeans.wordpress.com/2012/08/14/tornado-authentication/

在get_current_user()中，不要设置self.user和self.private，只需返回一个元组。像这样：

def get_current_user(self):
    private = -1
    user = self.get_secure_cookie("user")
    if user:
        private = self.UserModel.get_user_level_by_name(self.user)

    return (user, private) if private == 4 else None

龙卷风将处理剩下的事情。在get()方法中，当前(user, private)元组将在self.current_user中设置。

龙卷风如何停止当前的请求处理程序？

1 个答案: