Question

我有一个REST API，我需要通过Facebook Login API对用户进行身份验证。应该在移动应用程序中获取访问令牌（我猜），然后发送到服务器。所以我在旧教程中找到了一些代码，但我无法使其工作。这是代码：

from social.apps.django_app.utils import strategy
from django.contrib.auth import login
from django.views.decorators.csrf import csrf_exempt
from rest_framework.decorators import api_view, permission_classes
from rest_framework import permissions, status
from django.http import HttpResponse as Response


@strategy()
def auth_by_token(request, backend):
    user=request.user
    user = backend.do_auth(
        access_token=request.DATA.get('access_token'),
        user=user.is_authenticated() and user or None
        )
    if user and user.is_active:
        return user
    else:
        return None



@csrf_exempt
@api_view(['POST'])
@permission_classes((permissions.AllowAny,))
def social_register(request):
    auth_token = request.DATA.get('access_token', None)
    backend = request.DATA.get('backend', None)
    if auth_token and backend:
        try:
            user = auth_by_token(request, backend)
        except Exception, err:
            return Response(str(err), status=400)
        if user:
            login(request, user)
            return Response("User logged in", status=status.HTTP_200_OK)
        else:
            return Response("Bad Credentials", status=403)
    else:
        return Response("Bad request", status=400)

当我尝试使用参数发送POST请求时，出现此错误：

'unicode' object has no attribute 'do_auth'

我在official documentation中找到了一个示例，它使用@psa('social:complete')装饰器：

from django.contrib.auth import login

from social.apps.django_app.utils import psa

# Define an URL entry to point to this view, call it passing the
# access_token parameter like ?access_token=<token>. The URL entry must
# contain the backend, like this:
#
#   url(r'^register-by-token/(?P<backend>[^/]+)/$',
#       'register_by_access_token')

@psa('social:complete')
def register_by_access_token(request, backend):
    # This view expects an access_token GET parameter, if it's needed,
    # request.backend and request.strategy will be loaded with the current
    # backend and strategy.
    token = request.GET.get('access_token')
    user = backend.do_auth(request.GET.get('access_token'))
    if user:
        login(request, user)
        return 'OK'
    else:
        return 'ERROR'

但是如果我需要在请求体中传递后端名称呢？

Answer 1

应为request.backend.do_auth(request.GET.get('access_token'))。

我使用正确的代码段 ~~http://psa.matiasaguirre.net/docs/use_cases.html#signup-by-oauth-access-token~~ https://python-social-auth.readthedocs.io/en/latest/use_cases.html#signup-by-oauth-access-token更新了文档。

Answer 2

现在，您可以使用此库https://github.com/PhilipGarnero/django-rest-framework-social-oauth2使用来自任何python-social-auth后端（Facebook，Google，Github等）的持有令牌/第三方访问令牌，针对您的django-rest-framework对您的用户进行身份验证

如何使用python-social-auth在代码中通过Access Token进行身份验证

2 个答案: