DATABASES = {
  'default': {
    'ENGINE': 'django.db.backends.mysql',
    'NAME': '数据库名称',
    'USER': 'root',
    'PASSWORD': '123456',
    'HOST': '10.18.62.2',
    'PORT': '3306',
  }
}

# 登录验证
def login_ver(request):
  if request.method == 'POST':
    username = request.POST.get('username')
    password = request.POST.get('password')
    '''
    # 用前端输入的用户名，密码去数据库里找到用户的信息
    user=数据库(username,password)
    '''
    # 数据库中得有一张users表
    user = list(Users.objects.filter(username=username,password=password).values())
    # 用户信息记录在session中
    request.session['user'] = user
    # 创建session,否则key为None
    if not request.session.session_key:
      request.session.create()
    # 获取session_key
      key = request.session.session_key
    # 当另一机器登录时，本机器应该被挤下即当前sessionkey失效，后登录的用户的session可用，之前的sessionkey从数据库中删除
    # 获取指定key的session_data，下面用的ORM模型去数据库中取数据
    session_data = list(DjangoSession.objects.filter(session_key=key).values_list('session_data'))[0][0]
    # 删除key不为当前key，session_data等于当前session_data的session记录，从而达到一个账号只能一台机器登录的目的
    models.DjangoSession.objects.filter(session_data=session_data).exclude(session_key=key).delete()

from django.shortcuts import render, redirect

# 设置cookie
"""
key: cookie的名字
value: cookie对应的值
max_age: cookie过期的时间
"""
response.set_cookie(key, value, max_age)
# 为了安全，有时候我们会调用下面的函数来给cookie加盐
response.set_signed_cookie(key,value,salt='加密盐',...)

# 获取cookie 
request.COOKIES.get(key)
request.get_signed_cookie(key, salt="加密盐", default=None)

# 删除cookie
reponse.delete_cookie(key)

# 编写装饰器检查用户是否登录
def check_login(func):
  def inner(request, *args, **kwargs):
    next_url = request.get_full_path()
    # 假设设置的cookie的key为login，value为yes
    if request.get_signed_cookie("login", salt="SSS", default=None) == 'yes':
      # 已经登录的用户，则放行
      return func(request, *args, **kwargs)
    else:
      # 没有登录的用户，跳转到登录页面
      return redirect(f"/login?next={next_url}")

  return inner


# 编写用户登录页面的控制函数
@csrf_exempt
def login(request):
  if request.method == "POST":
    username = request.POST.get("username")
    passwd = request.POST.get("password")
    next_url = request.POST.get("next_url")

    # 对用户进行验证，假设用户名为：aaa, 密码为123
    if username === 'aaa' and passwd == '123':
      # 执行其他逻辑操作，例如保存用户信息到数据库等
      # print(f'next_url={next_url}')
      # 登录成功后跳转,否则直接回到主页面
      if next_url and next_url != "/logout/":
        response = redirect(next_url)
      else:
        response = redirect("/index/")
      # 若登录成功，则设置cookie，加盐值可自己定义取，这里定义12小时后cookie过期
      response.set_signed_cookie("login", 'yes', salt="SSS", max_age=60*60*12)
      return response
    else:
      # 登录失败，则返回失败提示到登录页面
      error_msg = '登录验证失败，请重新尝试'
      return render(request, "app/login.html", {
        'login_error_msg': error_msg,
        'next_url': next_url,
      })
  # 用户刚进入登录页面时，获取到跳转链接，并保存
  next_url = request.GET.get("next", '')
  return render(request, "app/login.html", {
    'next_url': next_url
  })


# 登出页面
def logout(request):
  rep = redirect("/login/")
  # 删除用户浏览器上之前设置的cookie
  rep.delete_cookie('login')
  return rep


# 给主页添加登录权限认证
@check_login
def index(request):
  return render(request, "app/index.html")

     

       
请使xx账户登录
       

        
       
       

        
       
        

          
        
        {% if login_error_msg %}
          

            {{ login_error_msg }}
          
        {% endif %}
       

         登录
       
      

# 设置session数据, key是字符串，value可以是任何值
request.session[key] = value
# 获取 session
request.session.get[key]
# 删除 session中的某个数据
del request.session[key]
# 清空session中的所有数据
request.session.delete()

# 编写装饰器检查用户是否登录
def check_login(func):
  def inner(request, *args, **kwargs):
    next_url = request.get_full_path()
    # 获取session判断用户是否已登录
    if request.session.get('is_login'):
      # 已经登录的用户...
      return func(request, *args, **kwargs)
    else:
      # 没有登录的用户，跳转刚到登录页面
      return redirect(f"/login?next={next_url}")

  return inner


@csrf_exempt
def login(request):
  if request.method == "POST":
    username = request.POST.get("username")
    passwd = request.POST.get("password")
    next_url = request.POST.get("next_url")
    # 若是有记住密码功能
    # remember_sign = request.POST.get("check_remember")
    # print(remember_sign)

    # 对用户进行验证
    if username == 'aaa' and passwd == '123':
      # 进行逻辑处理，比如保存用户与密码到数据库

      # 若要使用记住密码功能，可保存用户名、密码到session
      # request.session['user_info'] = {
        # 'username': username,
        # 'password': passwd
      # }
      request.session['is_login'] = True
      # 判断是否勾选了记住密码的复选框
      # if remember_sign == 'on':
      #  request.session['is_remember'] = True
      # else:
        # request.session['is_remember'] = False

      # print(f'next_url={next_url}')
      if next_url and next_url != "/logout/":
        response = redirect(next_url)
      else:
        response = redirect("/index/")
      return response
    else:
      error_msg = '登录验证失败，请重新尝试'
      return render(request, "app/login.html", {
        'login_error_msg': error_msg,
        'next_url': next_url,
      })
  next_url = request.GET.get("next", '')
  # 检查是否勾选了记住密码功能
  # password, check_value = '', ''
  # user_session = request.session.get('user_info', {})
  # username = user_session.get('username', '')
  # print(user_session)
  #if request.session.get('is_remember'):
  #  password = user_session.get('password', '')
  #  check_value = 'checked'
  # print(username, password)
  return render(request, "app/login.html", {
    'next_url': next_url,
    # 'user': username,
    # 'password': password,
    # 'check_value': check_value
  })


def logout(request):
  rep = redirect("/login/")
  # request.session.delete()
  # 登出，则删除掉session中的某条数据
  if 'is_login' in request.session:
    del request.session['is_login']
  return rep


@check_login
def index(request):
  return render(request, "autotest/index.html")

      

       
请使xxx账户登录
       

        
       
       

        
       
        

          
        
        {% if login_error_msg %}
          

            {{ login_error_msg }}
          
        {% endif %}
        // 若设置了记住密码功能
        // 

        //   记住密码
        // 
       

         登录