DRF如何使Register api视图仅适用于我的React App

时间:2019-02-05 02:06:19

标签: python django-rest-framework

所以我不知道如何使此注册视图只能接受来自我的react应用程序的注册。目前,任何人都可以在我的字段中输入值,然后我的API会接受它。我想以某种方式对其进行限制,以使其仅通过我允许的应用程序接受值。

serializers.py

# Serializer for user info for the registration API
class UserSerializer(serializers.ModelSerializer):

    class Meta:
        model = User # for the User model, use get_user_model for custom
        fields = ('id', 'username', 'password', 'email', 'first_name', 'last_name',)
        extra_kwargs = {'password': {'write_only': True}}
        read_only_fields = ('id',)

    # override create method
    def create(self, validated_data):

        user = User.objects.create(
            username=validated_data['username'],
            email=validated_data['email'],
            first_name=validated_data['first_name'],
            last_name=validated_data['last_name']
            )

        user.set_password(validated_data['password'])
        user.save()

        return user

views.py

class RegisterUserView(generics.CreateAPIView):
    model = User
    permission_classes = [permissions.AllowAny, ]
    serializer_class = UserSerializer
    queryset = ''

0 个答案:

没有答案