如何基于DRF构建Token认证的登录Serializer与View？

架构老林

2026-8-22

登录功能实现方案

1. 登录Serializer

登录仅需验证邮箱和密码，无需与模型直接绑定，用serializers.Serializer自定义验证逻辑即可：

from rest_framework import serializers
from django.contrib.auth import authenticate
from .models import AuthUser

class LoginSerializer(serializers.Serializer):
    email = serializers.EmailField(required=True)
    password = serializers.CharField(required=True, write_only=True)

    def validate(self, attrs):
        email = attrs.get('email')
        password = attrs.get('password')

        # 校验用户是否存在
        try:
            user = AuthUser.objects.get(email=email)
        except AuthUser.DoesNotExist:
            raise serializers.ValidationError("邮箱或密码错误")
        
        # 校验密码是否匹配
        if not user.check_password(password):
            raise serializers.ValidationError("邮箱或密码错误")
        
        attrs['user'] = user
        return attrs

2. 登录View

用APIView处理POST请求，完成验证后返回Token：

from rest_framework.views import APIView
from rest_framework.response import Response
from rest_framework import status
from rest_framework.authtoken.models import Token
from .serializers import LoginSerializer

class LoginView(APIView):
    def post(self, request):
        serializer = LoginSerializer(data=request.data)
        serializer.is_valid(raise_exception=True)
        user = serializer.validated_data['user']
        
        # 获取或生成用户Token
        token, created = Token.objects.get_or_create(user=user)
        
        return Response({'token': token.key}, status=status.HTTP_200_OK)

3. 配置URL路由

在项目urls.py中添加登录端点：

from django.urls import path
from .views import Signup, LoginView

urlpatterns = [
    path('signup/', Signup.as_view(), name='signup'),
    path('login/', LoginView.as_view(), name='login'),
]