django rest 框架中未提供错误身份验证凭据

Question

大家好，我在 DRF 中创建登录 api 并得到响应，但我测试到其他 api 的令牌然后得到错误 没有提供身份验证凭据， 我不知道我在哪里出错了，请帮帮我。自定义用户模型也无法使用，因为我已经使用过该模型

setting.py-这是设置文件

REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': (
        'api.authentication.TokenAuthentication',
        'rest_framework.authentication.SessionAuthentication',
        'rest_framework.authentication.TokenAuthentication',
        'rest_framework_simplejwt.authentication.JWTAuthentication'
    ),
    'DEFAULT_RENDERER_CLASSES': (
        'rest_framework.renderers.JSONRenderer',
        'rest_framework.renderers.BrowsableAPIRenderer',
        'rest_framework_datatables.renderers.DatatablesRenderer',
    ),
    'DEFAULT_FILTER_BACKENDS': (
        'rest_framework_datatables.filters.DatatablesFilterBackend',
    ),
    'DEFAULT_PAGINATION_CLASS': 'rest_framework_datatables.pagination.DatatablesPageNumberPagination',
    'PAGE_SIZE': 100,
}

models.py

class GmsUser(GmsBaseModel):
    first_name=models.CharField(max_length=255,null=True, blank=True)
    middle_name=models.CharField(max_length=255,null=True, blank=True)
    last_name=models.CharField(max_length=255,null=True, blank=True)
    user_name=models.CharField(max_length=255,null=True, blank=True, unique=True)
    password=models.CharField(max_length=255,null=True, blank=True)
    token = models.CharField(max_length=255, null=True)

    class Meta:
        db_table = "gms_users"
    def __str__(self):
        return self.user_name

views.py

@csrf_exempt
@api_view(["POST"])
@permission_classes((AllowAny,))
def gms_user_login(request):
    user_name = request.data.get("user_name")
    password = request.data.get("password")
    users=GmsUser.objects.filter(user_name=user_name).values_list('id',flat=True)
    role=GmsRole.objects.filter(id=GmsUserRole.objects.filter(user=users[0]).values_list('role',flat=True)[0]).values_list('role',flat=True)[0]
    # city=GmsUserProfile.objects.filter(user=users[0]).values_list('city',flat=True)[0]
    try:
        query=GmsUserRole.objects.filter(user=users[0]).exists()
    except Exception as e:
        return Response({"message":"User not found","error":True,"code":400,"results":str(e)},status=HTTP_400_BAD_REQUEST)
    if user_name is None or password is None:
        return Response({'detail': 'Please provide both username and password'})
    else:
        try:
            if query:
                user = GmsUser.objects.get(user_name=user_name)
        except GmsUser.DoesNotExist:
            return Response({'detail': 'Invalid UserName'})
        if user.password.lower() != password.lower():
            return Response({'detail': 'Invalid Password'})
    user.token=get_random_string(length=50)
    user.save()
    response_data=GmsUserSignupSerializer(user).data
    response_data1=GmsRoleSerializer(GmsRole.objects.get(role=role)).data
    response_data2=GmsUserProfileSerializer(GmsUserProfile.objects.get(user=users[0])).data
    response_data['roles']=response_data1
    response_data['user_profile']=response_data2
    try:
        return JsonResponse({"message": "login","error":False,"code":200,"results":{'token':user.token,'user':response_data}},status=HTTP_200_OK)
    except Exception as e:
        return JsonResponse({"message": "login","error":True,"code":500,"results":str(e)},status=HTTP_200_OK)

登录 api 响应

{
    "message": "login",
    "error": false,
    "code": 200,
    "results": {
        "token": "7R1EAR6qQdTyM6ZvD7kHfwdCHoj33tsp1QXUCIXSqU8929uMOq",
        "user": {
            "id": 4,
            "user_name": "edwin",
            "password": "1234"
            "roles": {
                "id": 1
            },
            "user_profile": {
                "id": 2
                "city": 1
            }
        }
    }
}

Answer 1

我认为您需要在 settings.py 中设置正确的 authentication 类。 现在定义了4个类。但我认为你必须设置一个类。

如果您选择rest_framework.authentication.TokenAuthentication，则无需使用随机字符串创建令牌。 rest_framework.authtoken 应用程序将创建 Token 模型，您可以使用它。

REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': (
        # 'api.authentication.TokenAuthentication',
        # 'rest_framework.authentication.SessionAuthentication',
        'rest_framework.authentication.TokenAuthentication',
        # 'rest_framework_simplejwt.authentication.JWTAuthentication'
    ),
    ...
}