Django drf simple-jwt身份验证“详细信息":“未找到具有给定凭据的活动帐户" [英] Django drf simple-jwt authentication"detail": "No active account found with the given credentials"

问题描述

我正在使用django-rest_framework_simple-jwt和自定义用户来实现用户身份验证， 我的models.py:

I am implementing user authentication with django-rest_framework_simple-jwt with custom user, My models.py:

class UserManager(BaseUserManager):
    def create_user(self, email, username, password, alias=None):
        user = self.model(
        email = self.normalize_email(email),
                username = username,)
        user.set_password(password)
        user.save()
        return user
   def create_superuser(self, email, username, password):
       self.create_user(email, username, password)
       user.is_staff()
       user.is_superuser = True
       user.save()
       return user

class User(AbstractBaseUser, PermissionsMixin):
    email = models.EmailField(null=False, unique=True)
    username = models.CharField(max_length=25, unique=True)
    is_active = models.BooleanField(default=True)
    is_staff = models.BooleanField(default=False)

    objects = UserManager()
    USERNAME_FIELD = "email"
    REQUIRED_FIELDS = ["username",]

所以我正在实现restframework simple-jwt身份验证，我的设置.py如下:

So I am implementing restframework simple-jwt authentication,my settings .py is as follows as:

REST_FRAMEWORK={
  'DEFAULT_AUTHENTICATION_CLASSES': [
      'rest_framework_simplejwt.authentication.JWTAuthentication',
   ]}

我的urls.py:

urlpatterns = [
       url(r'^api/token/$', TokenObtainPairView.as_view(),  name='token_obtain_pair'),
       url(r'^api/token/refresh/$', TokenRefreshView.as_view(), name='token_refresh'),]

在登录过程中，它返回错误提示"detail": "No active account found with the given credentials"我所有的用户都处于活动状态.我不知道如何解决这个问题，需要帮助.谢谢.

on login process, it returns error that "detail": "No active account found with the given credentials" all my users were active. I have no clue to sort this out, I need help.Thanks in advance.

推荐答案

请确保在将密码存储在数据库中之前对其进行了哈希处理.我遇到了同样的问题，发现我的密码以纯文本格式存储.将以下内容添加到我的UserSerializer中可以解决此问题

Ensure your password is being hashed before it is stored in your db. I ran into the same problem and discovered my passwords were being stored in plain text. Adding the following to my UserSerializer solved the issue

from django.contrib.auth.hashers import make_password

def validate_password(self, value: str) -> str:
    """
    Hash value passed by user.

    :param value: password of a user
    :return: a hashed version of the password
    """
    return make_password(value)

这篇关于Django drf simple-jwt身份验证“详细信息":“未找到具有给定凭据的活动帐户"的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！