2011-11-03 34 views

回答

5

此:

def view(request): 
    if request.user.is_authenticated(): 
     user = request.user 
     # do something with user 
42

如果有人想以实际提取的实际会话对象的用户ID(不管是什么原因 - 我做到了!),这里是如何:

from django.contrib.sessions.models import Session 
from django.contrib.auth.models import User 

session_key = '8cae76c505f15432b48c8292a7dd0e54' 

session = Session.objects.get(session_key=session_key) 
session_data = session.get_decoded() 
print session_data 
uid = session_data.get('_auth_user_id') 
user = User.objects.get(id=uid) 

信贷应该去Scott Barnham

+0

很酷,这可以节省1查询:'request.session.get('_ auth_user_id')',而不是'request.user.id',但似乎'请求中间件“或”RequestContext“实际上做了一个查询来检索auth用户,所以这在某些情况下并不实际存储。 –

+0

什么时候'_auth_user_id'在创建一个新的'Session'时被附加到'Session'对象? –

0

如果hwjp为您解决( “数据损坏”)不工作,这里是另一种解决方案:

import base64 
import hashlib 
import hmac 
import json 

def session_utoken(msg, secret_key, class_name='SessionStore'): 
    key_salt = "django.contrib.sessions" + class_name 
    sha1 = hashlib.sha1((key_salt + secret_key).encode('utf-8')).digest() 
    utoken = hmac.new(sha1, msg=msg, digestmod=hashlib.sha1).hexdigest() 
    return utoken 


def decode(session_data, secret_key, class_name='SessionStore'): 
    encoded_data = base64.b64decode(session_data) 
    utoken, pickled = encoded_data.split(b':', 1) 
    expected_utoken = session_utoken(pickled, secret_key, class_name) 
    if utoken.decode() != expected_utoken: 
     raise BaseException('Session data corrupted "%s" != "%s"', 
          utoken.decode(), 
          expected_utoken) 
    return json.loads(pickled.decode('utf-8')) 

s = Session.objects.get(session_key=session_key) 
decode(s.session_data, 'YOUR_SECRET_KEY')) 

贷:http://joelinoff.com/blog/?p=920

相关问题