Django REST Framework购物车API调用报HTTP 405错误求助

Hey there! Let's break down why you're hitting that 405 error with your cart API, and fix up a few other issues to make everything work as expected:

1. Wrong Serializer Initialization (Biggest Culprit for Broken Responses) #

In both add_to_cart and remove_from_cart, you're using CartSerializer(data=cart) when you should be passing the existing cart instance instead of data. The data parameter is for creating new objects from request data—for serializing an existing model instance, use instance:

# Replace this:
serializer = CartSerializer(data=cart)
# With this:
serializer = CartSerializer(instance=cart)

Without this fix, your serializer won't correctly serialize the updated cart, leading to unexpected responses that might contribute to method confusion.

2. Verify Your Request URL & HTTP Method #

Since your add_to_cart and remove_from_cart actions are marked as detail=True, they require a specific cart ID in the URL. The correct endpoint format is:

• Add to cart: POST /carts/<your_cart_id>/add_to_cart/
• Remove from cart: POST /carts/<your_cart_id>/remove_from_cart/

If you're hitting /carts/add_to_cart/ (without a cart ID) or using a GET request instead of POST/PUT, you'll get a 405 Method Not Allowed error immediately. Double-check your API client (Postman, curl, etc.) is using the right URL and HTTP method.

3. Fix Relationship Related Names (For Correct Serialization) #

Your model relationships have mismatched related names, which means your CartSerializer won't pull in cart items properly:

• In CartItem, the cart field has related_name='cart'—this should be related_name='items' so the Cart model can access its items via cart.items:

  # In CartItem model:
  cart = models.ForeignKey(
      Cart, related_name='items', on_delete=models.CASCADE, null=True, blank=True
  )
  

• In Cart, the user field has related_name='user'—this should be related_name='cart' so a user can access their cart with request.user.cart:

  # In Cart model:
  user = models.OneToOneField(
      User, related_name='cart', on_delete=models.CASCADE
  )
  

This will fix the items field in your CartSerializer so it actually returns the cart's items.

4. Narrow Down Exception Handling (Better Error Messages) #

Your broad except Exception as e blocks are hiding specific errors (like missing product_id in request data, or a non-existent product). Replace them with targeted exceptions to return meaningful feedback:

For add_to_cart:

try:
    product_id = request.data['product_id']
    quantity = int(request.data.get('quantity', 1))  # Default to 1 if quantity isn't provided
    product = Product.objects.get(pk=product_id)
except KeyError:
    return Response({'status': 'fail', 'message': 'Missing required field: product_id'}, status=400)
except Product.DoesNotExist:
    return Response({'status': 'fail', 'message': 'Product not found'}, status=404)
except ValueError:
    return Response({'status': 'fail', 'message': 'Quantity must be a positive integer'}, status=400)

5. Add User Permissions (Secure Your Cart API) #

Since carts are user-specific, you should restrict access so users can only modify their own cart. Add authentication and filter the queryset:

from rest_framework.permissions import IsAuthenticated

class CartViewSet(viewsets.ModelViewSet):
    permission_classes = [IsAuthenticated]  # Require users to be logged in
    queryset = Cart.objects.all()
    serializer_class = CartSerializer

    # Only return the current user's cart
    def get_queryset(self):
        return self.queryset.filter(user=self.request.user)

Final Test #

After making these changes:

1. Make sure you're sending a POST request to /carts/<cart_id>/add_to_cart/ with a JSON body like {"product_id": 1, "quantity": 2}
2. Verify the cart updates correctly and returns the serialized cart data
3. Repeat for the remove_from_cart endpoint with {"product_id": 1}

These fixes should resolve the 405 error and get your cart API working smoothly!

内容的提问来源于stack exchange，提问作者Rabbi hasan