我正在将数据库传输到新项目,更确切地说是用户.
不要问我为什么,但是旧数据库中的密码先用md5然后再用sha256进行哈希处理.
url(r'^api/rest-auth/',include('rest_auth.urls')),REST_FRAMEWORK = {
'DEFAULT_AUTHENTICATION_CLASSES': (
'users.auth.OldCustomAuthentication','rest_framework_jwt.authentication.JSONWebTokenAuthentication',)
}
这是我的身份验证文件：
class OldCustomAuthentication(BaseAuthentication):
def authenticate(self,request):
try:
password = request.POST['password']
email = request.POST['email']
except MultiValueDictKeyError:
return None
if not password or not email:
return None
password = hashlib.md5(password.encode())
password = hashlib.sha256(password.hexdigest().encode())
try:
user = User.objects.get(email=email,password=password.hexdigest())
except User.DoesNotExist:
return None
# User is found every time
print('FOUND USER',user)
return user,None
但是当我请求http://apiUrl/rest-auth/login/时仍然出现错误：
{
"non_field_errors": [
"Unable to log in with provided credentials."
]
}
你有什么主意吗？也许我做错了.
先感谢您.
杰里米
最佳答案
遵循@MrName的建议,我设法解决了我的问题.
因此,我在设置中删除了DEFAULT_AUTHENTICATION_CLASSES并添加了以下内容：
REST_AUTH_SERIALIZERS = {
'LOGIN_SERIALIZER': 'users.auth.LoginSerializer'
}
然后,我复制粘贴original serializer并使用以下命令修改了函数_validate_email：
def _validate_email(self,email,password):
user = None
if email and password:
user = self.authenticate(email=email,password=password)
# TODO: REMOVE ONCE ALL USERS HAVE BEEN TRANSFERED TO THE NEW SYSTEM
if user is None:
password_hashed = hashlib.md5(password.encode())
password_hashed = hashlib.sha256(password_hashed.hexdigest().encode())
try:
user = User.objects.get(email=email,password=password_hashed.hexdigest())
except ObjectDoesNotExist:
user = None
else:
msg = _('Must include "email" and "password".')
raise exceptions.ValidationError(msg)
return user