tornado------用户身份验证------用户身份验证框架

原创

究极可爱怪 2021-07-22 11:00:55 ©著作权

©著作权归作者所有：来自51CTO博客作者究极可爱怪的原创作品，请联系作者获取转载授权，否则将追究法律责任

一个完整的身份认证编程框架：

 1 import tornado
 2 from tornado import web, ioloop
 3 import uuid
 4 
 5 dict_sessions = {}
 6 
 7 
 8 class BaseHandler(web.RequestHandler):                         # 公共基类
 9     def get_current_user(self):                                # 写入current_user的函数
10         session_id = self.get_secure_cookie("session_id")
11         return dict_sessions.get(session_id)
12 
13 
14 class MainHandler(BaseHandler):
15     @web.authenticated                                         # 需要身份认证才能访问的处理器
16     def get(self, *args, **kwargs):
17         name = tornado.escape.xhtml_escape(self.current_user)
18         self.write("Hello, " + name)
19 
20 
21 class LoginHandler(BaseHandler):
22     def get(self, *args, **kwargs):
23         self.write('<html><body>'
24                    'Name: <input type="text" name="name">'
25                    '<input type="submit" value="Sign in">'
26                    '</form>'
27                    '</body></html>')
28 
29     def post(self, *args, **kwargs):
30         if len(self.get_argument("name")) < 3:
31             self.redirect("/login")
32         session_id = str(uuid.uuid1())
33         dict_sessions[session_id] = self.get_argument("name")
34         self.set_secure_cookie("session_id", session_id)
35         self.redirect("/")
36 
37 
38 application = web.Application([
39     (r"/", MainHandler),
40     (r"/login", LoginHandler),
41 ], cookie_secret="SECRET_DONT_LEAK", login_url="/login")
42 
43 
44 def main():
45     application.listen(8888)
46     ioloop.IOLoop.current().start()
47 
48 
49 if __name__ == '__main__':
50     main()