Django の認証処理実装パターン at DjangoCongress JP 2018 解説記事 http://nwpct1.hatenablog.com/entry/django-auth-patterns

1. 2018.05.19
Django
Masashi SHIBATA
c-bata c_bata_! "

2. Pythonista who loves Django
Masashi SHIBATA
c-bata c_bata_! "

5. Django
django.contrib.auth.forms
django.contrib.auth.views
KEYWORDS

8. : Built-in Auth Forms / Built-in Auth View Classes

9. : Built-in Auth Forms / Built-in Auth View Classes
Web

10. : Built-in Auth Forms / Built-in Auth View Classes
view 1.11
Deprecated

11. Authentication Backend
Email/Password Authentication
KEYWORDS

12. Authentication Backend
1
AUTHENTICATION_BACKENDS = [
‘django.contrib.auth.backends.ModelBackend',
‘accounts.backends.EmailAuthBackend’, #
]

13. Authentication Backend
1
AUTHENTICATION_BACKENDS = [
‘django.contrib.auth.backends.ModelBackend',
‘accounts.backends.EmailAuthBackend’, #
]
ModelBackend
username/password

14. Authentication Backend
1
AUTHENTICATION_BACKENDS = [
‘django.contrib.auth.backends.ModelBackend',
‘accounts.backends.EmailAuthBackend’, #
]
EmailAuthBackend
email/password

15. Authentication Backend
1
AUTHENTICATION_BACKENDS = [
‘django.contrib.auth.backends.ModelBackend',
‘accounts.backends.EmailAuthBackend’, #
]

16. • authenticate(request, **credentials):
HttpRequest
• get_user(user_id):

17. from django.contrib.auth import get_user_model
from django.contrib.auth.backends import ModelBackend
UserModel = get_user_model()
class EmailAuthBackend(ModelBackend):
def authenticate(self, username="", password="", **kwargs):
if username is None:
username = kwargs.get(UserModel.USERNAME_FIELD)
try:
user = UserModel.objects.get(email=username)
except UserModel.DoesNotExist:
return None
else:
if user.check_password(password) and
self.user_can_authenticate(user):
return user

18. from django.contrib.auth import get_user_model
from django.contrib.auth.backends import ModelBackend
UserModel = get_user_model()
class EmailAuthBackend(ModelBackend):
def authenticate(self, username="", password="", **kwargs):
if username is None:
username = kwargs.get(UserModel.USERNAME_FIELD)
try:
user = UserModel.objects.get(email=username)
except UserModel.DoesNotExist:
return None
else:
if user.check_password(password) and
self.user_can_authenticate(user):
return user
Github

19. from django.contrib.auth import get_user_model
from django.contrib.auth.backends import ModelBackend
UserModel = get_user_model()
class EmailAuthBackend(ModelBackend):
def authenticate(self, username="", password="", **kwargs):
if username is None:
username = kwargs.get(UserModel.USERNAME_FIELD)
try:
user = UserModel.objects.get(email=username)
except UserModel.DoesNotExist:
return None
else:
if user.check_password(password) and
self.user_can_authenticate(user):
return user
username validation
username @

20. https://github.com/c-bata/django-auth-example/pull/2

21. Django’s User Model
AbstractUser / AbstractBaseUser
KEYWORDS
ASCIIUsernameValidator

23. class UserProfile(models.Model):
user = models.OneToOneField(settings.AUTH_USER_MODEL)
some_additional_columns1 = models.SomethingField(...)
:

24. https://github.com/c-bata/django-auth-example/pull/3

26. U+0061
LATIN SMALL LETTER A
U+0430
CYRILLIC SMALL LETTER A

28. class User(AbstractBaseUser, PermissionsMixin):
username_validator = ASCIIUsernameValidator()
username = models.CharField(_(‘username'),
validators=[username_validator], ... )
:

29. >>> import unicodedata
>>> unicodedata.normalize('NFKC', ' ')
' '
>>> unicodedata.normalize('NFKC', ' ')
' '
>>> unicodedata.normalize('NFKC', '9⁹₉ ')
'9999'
>>> unicodedata.normalize('NFKC', 'Hℍℌ')
'HHH'

30. python-social-auth
OAuth 2.0
social-auth-core / social-auth-app-django
KEYWORDS
from scratch without python-social-auth

33. Python

34. https://github.com/c-bata/django-auth-example/pull/4

39. https://github.com/c-bata/django-auth-example/pull/1
https://github.com/c-bata/django-auth-example/pull/4

40. THANK YOU