Администратор Django не регистрируется после пользовательской аутентификации

Question

Собственная аутентификация, которую я написал, соответствует инструкциям от the docs. Я могу зарегистрироваться, войти в систему и выйти из системы, без проблем. Затем, когда я создаю суперпользователя python manage.py createsuperuser, он создает пользователя в базе данных, но это не дает мне войти в систему, когда я иду на страницу администратора и попробуйте войти говоря

Пожалуйста, введите правильный адрес электронной почты и пароль для учетной записи персонала. Учтите что оба поля могут быть чувствительны к регистру.

Вот мой код:

models.py:

from __future__ import unicode_literals 
from django.db import models 

from django.db import models 

from django.contrib.auth.models import AbstractUser, AbstractBaseUser, Group, Permission 
from django.contrib.auth.models import BaseUserManager 
from django.contrib.contenttypes.models import ContentType 
from django.core.exceptions import PermissionDenied, ObjectDoesNotExist, MultipleObjectsReturned 
from datetime import datetime 

from django.contrib.auth.models import PermissionsMixin 

import re 

class CustomUserManager(BaseUserManager): 
    def create_user(self, email, password = None): 
     '''Creates and saves a user with the given email and password ''' 

     if not email: 
      raise ValueError('Email address is requied.') 
     user = self.model(email = self.normalize_email(email)) 
     user.set_password(password) 
     user.save(using=self._db) 

     return user 

    def create_superuser(self, email, password): 
     ''' Creates and saves a superuser with the given email and password ''' 
     user = self.create_user(email, password = password) 
     user.is_admin = True 
     user.is_superuser = True 
     user.save(using=self._db) 

     return user 



class User(AbstractBaseUser, PermissionsMixin): 
    """ 
    Custom user class 
    """ 

    email = models.EmailField(verbose_name = 'email address',unique = True, db_index = True) 
    # email is the unique field that can be used for identification purposes 

    first_name = models.CharField(max_length = 20) 
    last_name = models.CharField(max_length = 30) 
    joined = models.DateTimeField(auto_now_add = True) 
    is_active = models.BooleanField(default = True) 
    is_admin = models.BooleanField(default = False) 
    is_superuser = models.BooleanField(default = False) 

    group = models.ManyToManyField(Group, related_name = 'users') 
    permission = models.ManyToManyField(Permission, related_name = 'users') 

    objects = CustomUserManager() 


    USERNAME_FIELD = 'email' # the unique identifier (mandatory) The filed must have unique=True set in its definition (see above) 


    def get_full_name(self): 
     return self.email 

    def get_short_name(self): 
     return self.first_name 

    def has_perm(self, perm, obj=None): 
     ''' Does the user have a specific permission''' 
     return True # This may need to be changed depending on the object we want to find permission for 

    def has_module_perms(self, app_label): 
     ''' Does the user have permission to view the app 'app_label'? The default answer is yes. 
     This may be modified later on. ''' 

     return True 

    @property 
    def is_staff(self): 
     ''' IS the user a member of staff? ''' 
     return self.is_admin 



    def __unicode__(self): 
     return '{user_email}, {user_title} joined on {joined_date}'.format(user_email = self.email, 
                     user_title = self.user_type, 
                     joined_date = self.joined) 

В backends.py:

from django.conf import settings 

from django.contrib.auth.hashers import check_password 
from accounts.models import User 

class EmailAuthBackend(object): 
    ''' Custom authentication backend. Allows users to login using their email address ''' 

    def authenticate(self, email=None, password = None): 
     ''' the main method of the backend ''' 

     try: 
      user = User.objects.get(email = email) 

      if user.check_password(password): 
       return user 

     except User.DoesNotExist: 
      return None 

    def get_user(self, user_id): 
     try: 
      user = User.objects.get(pk = user_id) # Note that you MUST use pk = user_id in getting the user. Otherwise, it will fail and even though the user is authenticated, the user will not be logged in 

      if user.is_active: 
       return user 
      return None 
     except User.DoesNotExist: 
      return None 

в admin.py:

from django import forms 
from django.contrib import admin 
from django.contrib.auth.models import Group 
from django.contrib.auth.admin import UserAdmin as BaseUserAdmin 
from django.contrib.auth.forms import ReadOnlyPasswordHashField 

from accounts.models import User as CustomUser 


class UserCreationForm(forms.ModelForm): 
    ''' A Form for creating new users. Includes all the required field, plus a repeated password.''' 
    password1 = forms.CharField(label = 'Password', widget = forms.PasswordInput) 
    password2 = forms.CharField(label = 'Password Confirmation', widget = forms.PasswordInput) 

    class Meta: 
     model = CustomUser 
     fields = ('email',) 

    def clean_password2(self): 
     ''' Checks that the two password entries match ''' 
     password1 = self.cleaned_data.get('password1') 
     password2 = self.cleaned_data.get('password2') 

     if password1 and password2 and password1 != password2: 
      raise forms.ValidationError('Passwords do NOT match!') 
     return password2 

    def save(self, commit = True): 
     ''' Save the provided password in hashed format ''' 
     user = super(UserCreationForm, self).save(commit = False) 
     user.set_password(self.cleaned_data['password1']) 

     if commit: 
      user.save() 

     return user 

class UserChangeForm(forms.ModelForm): 
    ''' A form for updating users. Includes all the field on the user, but replaces the password field with admin's password hash display field ''' 
    password = ReadOnlyPasswordHashField() 

    class Meta: 
     model = CustomUser 
     fields = ('email', 'password', 'first_name', 'last_name', 'is_active', 'is_admin') 

     def clean_password(self): 
      ''' Regardless of what the user provides, return the initial value. This is done here rather than on the field because the field 
     does not have access to the initial value''' 

      return self.initial['password'] 

class UserAdmin(BaseUserAdmin): 
    ''' The form to add and change user instances ''' 
    form = UserChangeForm 
    add_form = UserCreationForm 

    # The fields to be used in displaying the user model. 
    # These override the defintions on the base UserAdmin 
    # that reference specific fields on auth.User 

    list_display = ('email', 'first_name', 'last_name', 'is_admin') 
    list_filter = ('is_admin',) 

    fieldsets = (
     (None, {'fields': ('email', 'password')}), 
     ('Personal Info',{'fields': ('first_name', 'last_name',)}), 
     ('Permissions', {'fields': ('is_admin',)}), 

     ) 
    # add_fieldsets is not a standard ModelAdmin attribute. UserAdmin 
    # overrides get_fieldsets to use this attribute when creating a user 

    add_fieldsets = (
     (None, {'classes': ('wide',), 
      'fields': ('email', 'first_name', 'last_name', 'password1', 'password2')} 
      ), 
    ) 

    search_fields = ('email',) 
    ordering = ('email',) 
    filter_horizontal =() 

# Now, register the new UserAdmin... 

admin.site.register(CustomUser, UserAdmin) 

# ... and, since we're not using Django's built-in permissions, 
# unregister the Group model from admin. 
admin.site.unregister(Group) 

И, наконец, в settings.py:

AUTHENTICATION_BACKENDS = ['accounts.backends.EmailAuthBackend',] 

Так что чего не хватает?

Answer 1

Я думаю, что проблема в вашем EmailAuthBackend. Если вы добавите некоторую печать/запись на сервер, вы найдете the login form calls the authenticate method с username и password. Это означает, что email - None, и поэтому поиск user = User.objects.get(email = email) терпит неудачу.

В вашем случае, обычный ModelBackend будет отлично работать для вас, потому что у вас есть USERNAME_FIELD = 'email'. Если вы удалите AUTHENTICATION_BACKENDS из своих настроек, тогда логин должен работать. Затем вы можете удалить EmailAuthBackend.

Если вы хотите войти в системе пользователей с их числом клеток и паролем (и cell_number не был USERNAME_FIELD, то вы бы нужен бэкенд пользовательских проверок подлинности. Кроме того, необходимо будет пользовательская форма аутентификации, называемой authenticate(cell_number=cell_number, password=password). Другой примера используемой аутентичной аутентификации, является RemoteUserBackend, которая регистрируется пользователем на основе переменной среды, установленной сервером.