Flask-Login登录成功后用户仍匿名（MongoDB环境）

Hey there! I totally get where you're coming from—most Flask-Login tutorials and Stack Overflow posts focus on SQL databases like PostgreSQL or SQLite, so adapting it to MongoDB can feel like navigating uncharted territory. Let's fix up your User class and get Flask-Login playing nice with MongoDB, step by step.

First, let's finish and refine your User class. The big thing to watch out for with MongoDB is its ObjectId type—Flask-Login expects user IDs to be strings, so we need to handle that conversion explicitly. Here's a robust implementation:

from flask_login import UserMixin
from bson.objectid import ObjectId  # Required for handling MongoDB's unique IDs

class User(UserMixin):
    def __init__(self, user_document):
        # Pass the full MongoDB user document instead of individual fields
        # This makes it easy to access all user data later
        self.id = str(user_document['_id'])  # Convert ObjectId to string for Flask-Login
        self.user_name = user_document['user_name']
        self.active = user_document.get('active', True)  # Default to active if not set

    # These properties are required by Flask-Login; we can define them clearly
    @property
    def is_active(self):
        return self.active

    @property
    def is_authenticated(self):
        return True  # Skipping password checks per your request

    @property
    def is_anonymous(self):
        return False

    def get_id(self):
        # Flask-Login uses this method to retrieve the user ID for the session
        return self.id

Flask-Login needs a way to fetch a user from your database using the ID stored in the session. This is the missing piece most SQL-focused examples take for granted. Here's how to implement it for MongoDB (assuming you're using PyMongo):

from flask_login import LoginManager
from your_app import app  # Import your Flask app instance
from your_db_connection import db  # Import your MongoDB users collection (e.g., db.users)

# Initialize Flask-Login
login_manager = LoginManager()
login_manager.init_app(app)
login_manager.login_view = 'login'  # Name of your login route

@login_manager.user_loader
def load_user(user_id):
    # Convert the string ID back to ObjectId to query MongoDB
    user_doc = db.users.find_one({'_id': ObjectId(user_id)})
    if user_doc:
        return User(user_doc)
    # Return None if no user is found (Flask-Login handles this gracefully)
    return None

When you're ready to authenticate a user (again, skipping password checks as requested), fetch their document from MongoDB, create a User instance, and let Flask-Login handle the session:

from flask import request, redirect, url_for
from flask_login import login_user

@app.route('/login', methods=['POST'])
def login():
    # Get the username from your login form (adjust based on your setup)
    username = request.form.get('username')
    
    # Fetch the user document from MongoDB
    user_doc = db.users.find_one({'user_name': username})
    
    if user_doc:
        # Create a User instance and log them in
        user = User(user_doc)
        login_user(user)
        return redirect(url_for('dashboard'))  # Redirect to your protected page
    
    # Handle the case where the user doesn't exist
    return "User not found", 404

• ObjectId Conversion: Never skip converting ObjectId to a string for the session—MongoDB's ObjectId can't be serialized into Flask's session cookies, which will cause errors.
• Use the Full Document: Passing the entire MongoDB document to the User constructor makes it easy to add more user fields later (like email, permissions) without rewriting the class.
• UserMixin Shortcuts: If you want to keep it concise, UserMixin provides default implementations for most methods. You could simplify the User class to only override get_id() and handle the id conversion, but the explicit version above is easier to debug.

内容的提问来源于stack exchange，提问作者Debadatta Meher