Django管理員在每次點擊後要求登錄

Question

我正在使用Heroku上託管的Django應用程序。我可以用我的用戶名，密碼登錄到管理員。但是每次點擊（或幾秒鐘後的每次點擊），它會將我重新定向到登錄頁面，並將?next=/admin/model添加到網址中。 Infact有時會在它允許我查看管理控制檯之前多次請求登錄。此行爲未反映在本地部署中。管理員在當地工作得很好。

我試過這裏提到的建議：https://docs.djangoproject.com/en/1.8/faq/admin/#i-can-t-log-in-when-i-enter-a-valid-username-and-password-it-just-brings-up-the-login-page-again-with-no-error-messages。但是這並沒有幫助。

任何線索我可能做錯了什麼？

這裏是我的settings.py：

# Build paths inside the project like this: os.path.join(BASE_DIR, ...) 
import os 
BASE_DIR = os.path.dirname(os.path.dirname(__file__)) 


# Quick-start development settings - unsuitable for production 
# See https://docs.djangoproject.com/en/1.6/howto/deployment/checklist/ 

# SECURITY WARNING: keep the secret key used in production secret! 

# SECURITY WARNING: don't run with debug turned on in production! 
DEBUG = True 

TEMPLATE_DEBUG = True 

ALLOWED_HOSTS = [] 


# Application definition 

INSTALLED_APPS = (
    'django.contrib.admin', 
    'django.contrib.auth', 
    'django.contrib.contenttypes', 
    'django.contrib.sessions', 
    'django.contrib.messages', 
    'django.contrib.staticfiles', 
    'haystack', 
    'hash', 
    'smuggler', 


) 



MIDDLEWARE_CLASSES = (
    'django.contrib.sessions.middleware.SessionMiddleware', 
    'django.middleware.common.CommonMiddleware', 
    'django.contrib.auth.middleware.AuthenticationMiddleware', 
    'django.contrib.messages.middleware.MessageMiddleware', 
    'django.middleware.clickjacking.XFrameOptionsMiddleware', 
    'django.middleware.csrf.CsrfViewMiddleware', 
) 

ROOT_URLCONF = 'ssite.urls' 

WSGI_APPLICATION = 'ssite.wsgi.application' 

SESSION_ENGINE = "django.contrib.sessions.backends.cache" 

TEMPLATE_CONTEXT_PROCESSORS = ('django.contrib.auth.context_processors.auth', 
           'django.core.context_processors.debug', 
           'django.core.context_processors.i18n', 
           'django.core.context_processors.media', 
           'django.core.context_processors.static', 
           'django.core.context_processors.tz', 
           'django.contrib.messages.context_processors.messages', 
           'django.contrib.auth.context_processors.auth', 

AUTHENTICATION_BACKENDS = (
          'django.contrib.auth.backends.ModelBackend', 
          ) 

DATABASES = { 
    'default': { 
     'ENGINE': 'django.db.backends.postgresql_psycopg2', 
     'NAME': 'hash', 
     'USER': 'dc', 
     'PASSWORD': 'dc', 
     'HOST': '127.0.0.1', 
     'PORT': '5432', 

    } 
} 

LANGUAGE_CODE = 'en-us' 

TIME_ZONE = 'Asia/Kolkata' 

USE_I18N = True 

USE_L10N = True 

USE_TZ = True 

SESSION_EXPIRE_AT_BROWSER_CLOSE = True 
SESSION_SAVE_EVERY_REQUEST = True 
SESSION_COOKIE_AGE = 86400 # sec 
SESSION_COOKIE_DOMAIN = None 
SESSION_COOKIE_NAME = 'DSESSIONID' 
SESSION_COOKIE_SECURE = False 


BASE_DIR = os.path.dirname(os.path.abspath(__file__)) 

MEDIA_ROOT = os.path.join(BASE_DIR, 'media') 

MEDIA_URL = '/media/' 


HAYSTACK_CONNECTIONS = { 
    'default': { 
     'ENGINE': 'haystack.backends.elasticsearch_backend.ElasticsearchSearchEngine', 
     'URL': 'http://127.0.0.1:9200/', 
     'INDEX_NAME': 'haystack', 
    }, 
} 


# Parse database configuration from $DATABASE_URL 
import dj_database_url 
DATABASES['default'] = dj_database_url.config() 

# Honor the 'X-Forwarded-Proto' header for request.is_secure() 
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https') 

# Allow all host headers 
ALLOWED_HOSTS = ['*'] 

# Static asset configuration 
import os 
BASE_DIR = os.path.dirname(os.path.abspath(__file__)) 
STATIC_ROOT = 'static' 
STATIC_URL = '/static/' 
#STATIC_ROOT = os.path.join(BASE_DIR, 'static') 

STATICFILES_DIRS = (
    os.path.join(BASE_DIR, 'static'), 
) 
STATICFILES_STORAGE = 'whitenoise.django.GzipManifestStaticFilesStorage' 


FIXTURE_DIRS = (
    os.path.join(BASE_DIR, 'fixtures'), 
) 

from urlparse import urlparse 

es = urlparse(os.environ.get('SEARCHBOX_URL') or 'http://127.0.0.1:9200/') 

port = es.port or 80 

HAYSTACK_CONNECTIONS = { 
    'default': { 
     'ENGINE': 'haystack.backends.elasticsearch_backend.ElasticsearchSearchEngine', 
     'URL': es.scheme + '://' + es.hostname + ':' + str(port), 
     'INDEX_NAME': 'documents', 
    }, 
} 

if es.username: 
    HAYSTACK_CONNECTIONS['default']['KWARGS'] = {"http_auth": es.username + ':' + es.password} 


try: 
    from local_settings import * 
except ImportError as e: 
    pass 

Answer 1

'django.contrib.auth.middleware.SessionAuthenticationMiddleware'，

我認爲這會做的伎倆。 https://docs.djangoproject.com/en/1.8/ref/middleware/#django.contrib.auth.middleware.SessionAuthenticationMiddleware]

Answer 2

萬一發生這種情況給任何人，我有相同的問題，並最終意識到，我是隨機產生在我settings.py文件SECRET_KEY值，如果沒有將該密鑰已經被設置爲一個環境變量。我完全忘記了在Heroku上設置這個問題，之後問題就解決了。

Answer 3

對我而言，這是因爲我同時運行另一個Django開發服務器（同一個域，不同的端口）。我不知道造成這個問題的細節，但關閉另一臺服務器解決了問題。

編輯
如果你錯過了這個問題聯繫到文檔：如果您需要運行多個Django的服務器，你可以通過設置各個不同的SESSION_COOKIE_NAME來解決這個問題。