如何从consumer.py django 访问用户信息？

问题描述

我正在使用 react.js 和 django、django-rest-framework、djoser、django-channels==3.0.2.. 构建一个社交媒体应用程序。 问题是我想根据好友请求以及帖子和评论的喜好制作一个通知系统。问题是我想要某种安全性，当我通过 websocket 从 react 发送请求时，我想检查发件人是否是经过身份验证的用户，通过在 websockets 上发送用户 ID，并将其与记录的进行比较在用户的 id 中。由于我使用 Djoser 进行身份验证而无法获得 $fileDest = Add-PnPFile -FileName $filename -Folder "uploadFolder" -Stream $fileSource -Connection $destConnection ，因此还有其他方法可以实现吗？

解决方法

您是否尝试在 django-channels 应用程序中添加中间件来对用户进行身份验证和授权， 如果没有，请按照以下步骤操作： 1）在与routing.py相同的文件夹中创建一个名为middleware.py的新文件 2)在middleware.py
中添加如下内容 Note: The following implementation is from django-channels documentation

from urllib.parse import parse_qs

from django.contrib.auth import get_user_model
from django.contrib.auth.models import AnonymousUser
from django.db import close_old_connections
from channels.auth import AuthMiddleware,AuthMiddlewareStack,UserLazyObject
from channels.db import database_sync_to_async
from channels.sessions import CookieMiddleware,SessionMiddleware
from rest_framework_simplejwt.tokens import AccessToken

User = get_user_model()

"""[summary]
plucks the JWT access token from the query string and retrieves the associated user.
  Once the WebSocket connection is opened,all messages can be sent and received without
  verifying the user again. Closing the connection and opening it again 
  requires re-authorization.
for example: 
ws://localhost:8000/<route>/?token=<token_of_the_user>

"""


@database_sync_to_async
def get_user(scope):
    close_old_connections()
    query_string = parse_qs(scope['query_string'].decode())
    token = query_string.get('token')
    if not token:
        return AnonymousUser()
    try:
        access_token = AccessToken(token[0])
        user = User.objects.get(id=access_token['id'])
    except Exception as exception:
        return AnonymousUser()
    if not user.is_active:
        return AnonymousUser()
    return user


class TokenAuthMiddleware(AuthMiddleware):
    async def resolve_scope(self,scope):
        scope['user']._wrapped = await get_user(scope)


def TokenAuthMiddlewareStack(inner):
    return CookieMiddleware(SessionMiddleware(TokenAuthMiddleware(inner)))

3) 将中间件配置到路由中 3.1)打开routing.py

from channels.routing import ProtocolTypeRouter
from django.urls import path
from channels.routing import ProtocolTypeRouter,URLRouter
from <base-app-name>.middleware import TokenAuthMiddlewareStack

from <app-name>.consumers import <consumer-name>

application = ProtocolTypeRouter({
    'websocket': TokenAuthMiddlewareStack(
        URLRouter([
            path('<route>/',<consumer-name>),]),),})

4)在AsyncWebSocketConsumer的connect方法中检查用户

async def connect(self):
    user = self.scope['user']
    if user.is_anonymous:
        await self.close()
    else:
        <your logic>