Question

我已经为用户注册和登录创建了序列化器和api端点。到目前为止，一切正常，但当创建的用户没有电子邮件地址时，我无法登录。如果用户有电子邮件地址，我可以通过提交电子邮件或用户名登录，也可以注册没有电子邮件地址的用户。这是我的代码：

serializers.py

class UserLoginSerializer(ModelSerializer):
    token = CharField(allow_blank=True, read_only=True)
    username = CharField(required=False, allow_blank=True)
    email = EmailField(label='Email Address', required=False, allow_blank=True)
    class Meta:
        model = User
        fields = [
            'username',
            'email',
            'password',
            'token',
        ]
        extra_kwargs = {"password":{"write_only": True}} 
    def validate(self, data):
        user_obj = None
        email = data.get("email", None)
        username = data.get("username", None)
        password = data["password"]
        if not email and not username:
            raise ValidationError("A username or email is required to login.")
        user = User.objects.filter(
                Q(email=email) |
                Q(username=username)
            ).distinct()
        user = user.exclude(email__isnull=True).exclude(email__iexact='')
        if user.exists() and user.count() == 1:
            user_obj = user.first()
        else:
            raise ValidationError("This username/email is not valid")
        if user_obj:
            if not user_obj.check_password(password):
                raise ValidationError("Incorrect credentials, please try again")
        data["token"] = "SOME RANDOM TOKEN"
        return data

views.py

class UserLoginAPIView(APIView):
    permission_classes = [AllowAny]
    serializer_class = UserLoginSerializer
    def post(self, request, *args, **kwargs):
        data = request.data
        serializer = UserLoginSerializer(data=data)
        if serializer.is_valid(raise_exception=True):
            new_data = serializer.data
            return Response(new_data, status=HTTP_200_OK)
        return Response(serializer.errors, status=HTTP_400_BAD_REQUEST)

Answer 1

我认为这是有问题的行：

 user = user.exclude(email__isnull=True).exclude(email__iexact='')

您排除了没有电子邮件的用户，因此显然他们无法登录。

django-rest-framework登录用户

1 个答案: