35👍
from rest_framework.authtoken.models import Token
user = Token.objects.get(key='token string').user
7👍
If you invoke the user object directly from the Token
class, as presented in @aliva’s solution, you will get a raw partial Django User with just the fields living in the database. If you need to get the real user object, with e.g. its computed properties, you can do this:
from rest_framework.authtoken.models import Token
user_id = Token.objects.get(key=request.auth.key).user_id
user = User.objects.get(id=user_id)
- Groups per object using Django and django-guardian object permissions
- Python requests return file-like object for streaming
- Remove autofocus attribute from field in Django
- Additional Serializer Fields in Django REST Framework 3
3👍
Here is The default authorization token model
:
@python_2_unicode_compatible
class Token(models.Model):
"""
The default authorization token model.
"""
key = models.CharField(_("Key"), max_length=40, primary_key=True)
user = models.OneToOneField(
settings.AUTH_USER_MODEL, related_name='auth_token',
on_delete=models.CASCADE, verbose_name=_("User")
)
created = models.DateTimeField(_("Created"), auto_now_add=True)
class Meta:
# Work around for a bug in Django:
# https://code.djangoproject.com/ticket/19422
#
# Also see corresponding ticket:
# https://github.com/encode/django-rest-framework/issues/705
abstract = 'rest_framework.authtoken' not in settings.INSTALLED_APPS
verbose_name = _("Token")
verbose_name_plural = _("Tokens")
def save(self, *args, **kwargs):
if not self.key:
self.key = self.generate_key()
return super(Token, self).save(*args, **kwargs)
def generate_key(self):
return binascii.hexlify(os.urandom(20)).decode()
def __str__(self):
return self.key
As you can see this model has OneOnOne relations with the User
model.
So if you want to get the
User
than mapped to specificToken
:
from rest_framework.authtoken.models import Token
try:
Token.objects.get(key="token").user
except Token.DoesNotExist:
pass
For more information see Authentication documents
3👍
A better method to use would be to simply call request.user
since access to the Token means an authenticated request. DjangoRestFramework gives access to request.auth
and request.user
on a successful TokenAuthentication.
2👍
Suppose you wanna get userid and username when obtain auth token in Django Rest Framework
More info can get from https://www.django-rest-framework.org/api-guide/authentication/#by-exposing-an-api-endpoint
# in views.py
from rest_framework.auth.models import Token
from rest_framework.auth.views import ObtainToken
from rest_framework.response import Response
class MyObtainToken(ObtainToken):
"""Return User Info along with token"""
def post(self, request, *arg, **kwarg)
serializer = self.serializer_class(request.data, context={'request':request})
serializer.is_valid(raise_exception=True)
user = serializer.valided_data['user']
token, _ = Token.objects.get_or_create(user)
return Response(
{
'token': token.key,
'username': user.username,
'userid': user.pk
})
# in urls.py
urlpatterns += [path(r'api/obtain_auth_token', MyObtainToken.as_view()]
- How to make GET CORS request with authorization header
- How to write a Pandas Dataframe to existing Django model
- Django template rows of multiple items
0👍
You can use @action
of an existing ModelViewSet for brevity:
class UserViewSet(viewsets.ModelViewSet):
...
@action(
detail=False,
methods=["get"],
url_path=r"current",
)
def current_user(self, request):
return Response(
UserSerializer(request.user, context={"request": request}).data
)
And then GET
it at:
http://localhost:8000/yourapi/users/current/
- Getting error cannot import name 'six' from 'django.utils' when using Django 3.0.0 latest version
- Blank option in required ChoiceField
- Django & Heroku – ImportError: No module named gettingstarted.wsgi