主页 / 问题 / 720859
Accepted
virvaldium
Asked:2020-09-20 20:03:33 +0000 UTC2020-09-20 20:03:33 +0000 UTC

访问令牌生成

  • 772

您能告诉我如何为之前创建的应用程序生成访问令牌吗？我正在使用 oauth2 身份验证。有时我需要手动生成令牌。管理面板中的应用程序是使用以下参数创建的：

Client type:  Confidential
Authorization grant type:  Resource owner password-based

如何创建知道此应用程序 ID 的访问令牌？

django-rest-framework

1 个回答

  1. Best Answer

    要手动为用户生成电流，您将需要以下内容：

    import datetime

from django.conf import settings

from oauth2_provider.models import Application, AccessToken, RefreshToken
from oauth2_provider.settings import oauth2_settings
from oauthlib.oauth2.rfc6749.tokens import random_token_generator

from smass_cabinet.users.models import User


def get_registration_token(user_id, request):
    """
    Функция генерирующая токен 
    :return:
    """
    registration_app_name = getattr(settings, "REGISTRATION_APP_NAME", "default_app_name")
    expire_seconds = oauth2_settings.user_settings['ACCESS_TOKEN_EXPIRE_SECONDS']
    scopes = oauth2_settings.user_settings['SCOPES']

    live_token_time = datetime.datetime.now() + datetime.timedelta(seconds=expire_seconds)
    user = User.objects.filter(id=user_id).get()
    application = Application.objects.get(name=registration_app_name)
    access_token = AccessToken.objects.create(
        user=user,
        application=application,
        expires=live_token_time,
        token=random_token_generator(request),
        scope=scopes
    )

    refresh_token = RefreshToken.objects.create(
        user=user,
        token=random_token_generator(request),
        access_token=access_token,
        application=application)

    token = {
        'access_token': access_token.token,
        'token_type': 'Bearer',
        'expires_in': expire_seconds,
        'refresh_token': refresh_token.token,
        'scope': scopes}

    return token

    Settings.py 应包含以下设置：

    REGISTRATION_APP_NAME = 'app_name'

    如您所见，它将新创建用户的 request 和 id 作为参数

    • 0

相关问题