django中token的签发

#导入jwt
from rest_framework_jwt.serializers import jwt_payload_handler
from rest_framework_jwt.serializers import jwt_encode_handler
#导入jwt默认的登录模块
from django.contrib import auth

class LoginAPIView(APIView):

    def post(self, request, *args, **kwargs):
        username = request.data.get(‘username‘)
        password = request.data.get(‘password‘)

        if not (username and password):
            return Response({
                ‘error‘: ‘username与password为必须字段‘
            })
        user_obj = auth.authenticate(username=username, is_active=True, password=password)
        if user_obj:
            # 签发token
            payload = jwt_payload_handler(user_obj)
            token = jwt_encode_handler(payload)
            return Response({
                ‘status‘: 0,
                ‘msg‘: ‘ok‘,
                ‘token‘: token
            })
        else:
            return Response({
                ‘status‘: 1,
                ‘msg‘: ‘username与password有误‘
            })

# 全局认证组件
 REST_FRAMEWORK={
     ‘DEFAULT_AUTHENTICATION_CLASSES‘:[
         ‘app01.cache_jwt.JwtToken‘,
    ]
 }
#设置token过期时间
import datetime
JWT_AUTH = {
    # 过期时间
    ‘JWT_EXPIRATION_DELTA‘: datetime.timedelta(seconds=300),
}

#局部使用jwt
authentication_classes = [JwtToken]
#局部禁用jwt
authentication_classes = []

from rest_framework_jwt.authentication import BaseJSONWebTokenAuthentication
from rest_framework_jwt.authentication import jwt_decode_handler
from rest_framework import exceptions

class JwtToken(BaseJSONWebTokenAuthentication):
    def authenticate(self, request):

        jwt_value = request.META.get(‘HTTP_TOKEN‘)
        if not jwt_value:
            raise exceptions.AuthenticationFailed(‘token 字段是必须的‘)
        try:
            payload = jwt_decode_handler(jwt_value)
        except jwt.ExpiredSignature:
            raise exceptions.AuthenticationFailed(‘token已过期‘)
        except jwt.InvalidTokenError:
            raise exceptions.AuthenticationFailed(‘token非法‘)

        user = self.authenticate_credentials(payload)

        return (user, jwt_value)