Django - 用户应该有 is_active = False 但它在管理员中显示为活动

Question

我的自定义注册视图将用户的 is_active 设置为 False。他们使用通过电子邮件发送的授权令牌将 is_active 设置为 True。但是，在我以新用户身份注册后，我立即以超级用户身份登录管理页面，我可以看到我的新用户已选中 active。

观看次数

def signup(request):
    if request.method == 'POST':
        form = CustomUserCreationForm(request.POST)
        if form.is_valid():
            user = form.save()
            user.is_teacher = True
            user.is_staff = True
            user.is_active = False
            to_email = form.cleaned_data.get('email')
            user.username = to_email  # make the username the same as the email
            user.save()
            group = Group.objects.get(name='teacher')
            user.groups.add(group)
            current_site = get_current_site(request)
            
            # use sendgrid api for email
            sendgrid_client = SendGridAPIClient(
                api_key=os.environ.get('SENDGRID_API_KEY'))
            from_email = From("me@email.com")
            to_email = To(to_email)
            subject = "Activate your SmartMark Account"
            active_link = render_to_string('account/acc_active_email_link.html', {
                'user': user,
                'domain': current_site.domain,
                'uid': urlsafe_base64_encode(force_bytes(user.pk)),
                'token': account_activation_token.make_token(user),
            })

            html_text = f'Hello {user}<br/><p>Registration email</p><a href="{active_link}">{active_link}</a>'
            html_content = HtmlContent(html_text)
            mail = Mail(from_email, to_email, subject,
                        html_content)
            response = sendgrid_client.send(message=mail)

            return redirect(reverse('accounts:account_activation_sent'))
    else:
        form = CustomUserCreationForm()
    return render(request, 'account/signup.html', {'form': form})

def account_activation_sent(request):
    return render(request, 'account/account_activation_sent.html')

def activate(request, uidb64, token):
    try:
        uid = force_text(urlsafe_base64_decode(uidb64))
        user = CustomUser.objects.get(pk=uid)
    except (TypeError, ValueError, OverflowError, User.DoesNotExist):
        user = None
    # calls check_token function but user is already set to active - email and token
    # were never used.
    if user is not None and account_activation_token.check_token(user, token):
        user.is_active = True
        user.save()
        login(request, user)
        return redirect('home')
    else:
        return render(request, 'account/account_activation_invalid.html')

CustomUser 模型

class CustomUser(AbstractUser):
    id = models.UUIDField(primary_key=True, default=uuid.uuid4, editable=False)
    is_teacher = models.BooleanField('teacher status', default=False)

    def __str__(self):
        return self.username

表格

class CustomUserCreationForm(UserCreationForm):
    first_name = forms.CharField(max_length=30)
    last_name = forms.CharField(max_length=30)

    class Meta:
        model = get_user_model()
        fields = ('email', 'first_name', 'last_name')

    def signup(self, request, user):
        user.first_name = self.cleaned_data['first_name']
        user.last_name = self.cleaned_data['last_name']

    def clean_email(self):
        value = self.cleaned_data["email"]
        if not value:
            raise forms.ValidationError('An Email address is required.')
        check_users = CustomUser.objects.filter(email__iexact=value)
        if check_users:
            raise forms.ValidationError('This email is already in use.')
        return value

我正在使用 Django 的内置身份验证。我希望管理面板中的Active 不会被选中。我还尝试将user.is_active=False 移到user.save() 之后，但这并没有改变行为。通过查看我的初始迁移文件，我知道 is_active 的默认值是 True，但我认为我的注册视图会覆盖它

编辑 我以为我已经通过更改为user=form.save(commit=False) 解决了这个问题，但它又发生了。新注册会自动激活。

Answer 1

首先我将表单保存更改为：

user=form.save(commit=False)

但是，问题似乎在于，当我通过电子邮件发送授权令牌时，电子邮件收件人正在检查 url 是否有垃圾邮件。通过检查令牌 url 是否有效，令牌得到验证。我添加了一个 POST 表单，以便在用户提交表单之前不会检查令牌。