2015-05-05 60 views
0

我試圖從Django rest框架實現TokenAuthentication。 我能夠從服務器獲取的令牌密鑰,TokenAuthentication:無法驗證

$curl -d "username=admin&password=admin" http://localhost:8000/api-token-auth/ 
{"token":"a571a596eab2e4063da4b9250a05b570ba8e9786"} 

我不能得到任何API使用它,

curl -X GET http://localhost:8000/cart/ -H "Authorization: Token a571a596eab2e4063da4b9250a05b570ba8e9786" 
{"detail":"Authentication credentials were not provided."} 

我的設置文件,

INSTALLED_APPS = (
    'django.contrib.admin', 
    'django.contrib.auth', 
    'django.contrib.contenttypes', 
    'django.contrib.sessions', 
    'django.contrib.messages', 
    'django.contrib.staticfiles', 
    'rest_framework', 
    'rest_framework.authtoken', 
    'myapp', 
) 
MIDDLEWARE_CLASSES = (
    'django.contrib.sessions.middleware.SessionMiddleware', 
    'django.middleware.common.CommonMiddleware', 
    'django.contrib.auth.middleware.AuthenticationMiddleware', 
    'django.contrib.auth.middleware.SessionAuthenticationMiddleware', 
    'django.contrib.messages.middleware.MessageMiddleware', 
    'django.middleware.clickjacking.XFrameOptionsMiddleware', 
) 
#rest framework 
REST_FRAMEWORK = { 
    'DEFAULT_FILTER_BACKENDS': (
     'rest_framework.filters.DjangoFilterBackend', 
    ), 
    'DEFAULT_PERMISSION_CLASSES': (
     'rest_framework.permissions.IsAuthenticated', 
     'rest_framework.permissions.DjangoObjectPermissions', 
    ), 
    'DEFAULT_AUTHENTICATION_CLASSES': (
     'rest_framework.authentication.BasicAuthentication', 
     'rest_framework.authentication.SessionAuthentication', 
    ) 
} 

回答

1

您在

中缺少TokenAuthentication後端
'DEFAULT_AUTHENTICATION_CLASSES': (
     'rest_framework.authentication.BasicAuthentication', 
     'rest_framework.authentication.SessionAuthentication', 
    ) 

只需添加rest_framework.authentication.TokenAuthentication行。請記住,順序很重要,因爲身份驗證後端會按順序進行測試。

+0

它的作品!我也有同樣的懷疑。我們有基本認證和會話認證課程。在文檔中沒有給出令牌認證。謝謝 !! – Netro

+0

drf對身份驗證後端,過濾,權限等工作始終是一樣的。很高興幫助=)。 – argaen