Django框架CBV装饰器中间件auth模块CSRF跨站请求问题

from Django.utils.decorators import method_decorator

from djanGo.utils.decorators import method_decorator


class MyLogin(View):
	@method_decorator(auth)
	def get(self, request):
    return HttpResponse('Is from get')

	def post(self, request):
    return HttpResponse('Is from post')

from django.utils.decorators import method_decorator

@method_decorator(auth, name='get')  # 方法名
class MyLogin(View):
	def get(self, request):
    return HttpResponse('Is from get')

	def post(self, request):
    return HttpResponse('Is from post')

from django.utils.decorators import method_decorator


class MyLogin(View):
    @method_decorator(auth)
    def dispatch(self, request, *args, **kwargs):
        super.__init__()
    def get(self, request):
        return HttpResponse('Is from get')

    def post(self, request):
        return HttpResponse('Is from post')

MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]

from django.utils.deprecation import MiddlewareMixin

<form action="" method="post">
    {% csrf_token %}
    <input type="text" placeholder="用户名">
    <input type="passWord" placeholder="密码">
    <input type="submit">
</form>

<script>
    $('.btn').click(function (){
        $.ajax({

            url:'',
            type:'post',
            // 第一种方式
            // data:{'username':'jesse', 'csrfmiddlewaretoken':$('[name="csrfmiddlewaretoken"]')},
            // 第二种
            data:{'username':'jesse', 'csrfmiddlewaretoken':'{{ csrf_token }}'},
            success:function(){

            }
        })
    })
</script>

@csrf_protect

@csrf_exempt

# 如果该函数有返回的html不能再加{% csrf_token %}

createsuperuser
# 根据提示输入密码邮箱

from django.contrib import auth

from django.shortcuts import render, HttpResponse, redirect

# Create your views here.
from django.views import View
from django.contrib import auth

def login(request):
    if request.method == 'POST':
        username = request.POST.get('username')
        password = request.POST.get('password')
        # 利用auth模块验证用户是否合法
        '''
        1.自动去auth_user表中进行验证
        2.把密码自动加密进行比对
        '''
        # 该方法验证正确会返回用户对象，错误会返回None
        user_obj = auth.authenticate(request, username=username, password=password)
        print(user_obj)
        if user_obj:
            auth.login(request, user_obj)  # 相当于设置session，记录用户状态
            return redirect('/home/')
    return render(request, 'login.html')

from django.contrib.auth.decorators import login_required


# 同样的使用auth自带的装饰器也需要导入login_required

@login_required(login_url='/login/')
# 该装饰器使用的时候需要传 没有登录 返回的路由，不传默认访问自带的地址account/login 
def func(request):
    return HttpResponse('FUNC PAGE')

is_right = request.user.check_password(old_pwd)
if is_right:
  # 判断两次密码是否一致
  if new_pwd == re_pwd:
    # 修改密码
    request.user.set_password(new_pwd)
    requesr.user.save()  # 保存到数据库
    return redirect('/login/')

def logout(request):
  auth.logout(request)  # 清除cookie
  return redirect('/home/')

from django.contrib.auth.model import User
# 需要导入模块

def reGISter(request):
  if request.method == 'POST':
    username = request.POST.get('username')
    password = request.POST.get('password')
    User.object.create(username=username,password=password)  # 密码是名文
    # create_user 密码是密文

form django.contrib.auth.models import AbstractUser

class UserInfo(AbstractUser):
  phone = models.CharField(max_lenth=32)
  addr = models.CharFiled(max_lenth=32)
  # 增加字段

AUTH_USER_MODEL = 'app01.UserInfo'
# 应用名称.类名