eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

            from django.urls import path
from users import views

urlpatterns = [
    path(‘login/‘, views.LoginView.as_view()),
    path(‘order/‘, views.OrderView.as_view()),
]

            from rest_framework.views import APIView
from rest_framework.response import Response
from utils.JWTAuth import create_token, JWTAuthentication
class
             LoginView(APIView):
    
            def post(self, request, *args, **kwargs):
        # 获取用户名密码
        name = request.data.get(‘name‘)
        pwd = request.data.get(‘pwd‘)
        # 获取User对象try:
            user = models.User.objects.filter(name=name, pwd=pwd).first()
        except Exception:
            return Response({‘status‘: 1, ‘errmsg‘: ‘用户名或密码不正确!‘})
        # 获取token
        token = create_token({‘id‘: user.id, ‘name‘: user.name}, 1)
        # 返回成功响应return Response({‘status‘: 0, ‘token‘: token})

class OrderView(APIView):
    authentication_classes = [JWTAuthentication, ]

    def get(self, request):
        return Response({‘status‘: 0, ‘msg‘: ‘ok‘})

            import
             jwt

            from jwt import exceptions as JWTException
from django.conf import settings
import datetime
from rest_framework.authentication import BaseAuthentication
from rest_framework.exceptions import AuthenticationFailed

def create_token(payload, timeout=1):
    # 给传过来的业务数据增加一个过期时间限制
    payload[‘exp‘] = datetime.datetime.utcnow() + datetime.timedelta(minutes=timeout)
    # 定义盐值
    salt = settings.SECRET_KEY
    # 默认不可逆加密算法为HS256
    token = jwt.encode(payload=payload, key=salt)
    return token

class JWTAuthentication(BaseAuthentication):
    def authenticate(self, request):
        # 从url参数中获取token
        token = request.query_params.get(‘token‘)
        # 盐值
        salt = settings.SECRET_KEY
        # 解码tokentry:
            payload = jwt.decode(jwt=token, key=salt, verify=True)
        except JWTException.ExpiredSignature:
            raise AuthenticationFailed(‘token已失效‘)
        except jwt.DecodeError:
            raise AuthenticationFailed(‘token认证失败‘)
        except jwt.InvalidTokenError:
            raise AuthenticationFailed(‘非法的token‘)

        return payload.get(‘name‘), token