Flask-Login技术问题：如何将current_user设置为AnonymousUserMixin对象？

How AnonymousUserMixin is set as current_user when not logged in #

Flask-Login handles this automatically out of the box—you don’t need to write any extra code for the default behavior. Here’s the breakdown:

• The LoginManager class has an anonymous_user attribute that defaults to AnonymousUserMixin. This is the class that gets instantiated when no user is logged in.
• On every request, Flask-Login checks if there’s a valid user ID stored in the session. If there isn’t (or if the ID can’t be loaded via your user loader callback), it sets current_user to an instance of anonymous_user (which is AnonymousUserMixin by default).

If you ever need to customize your anonymous user (add extra attributes or methods), you can override this:

from flask_login import AnonymousUserMixin

class CustomAnonymousUser(AnonymousUserMixin):
    def __init__(self):
        self.role = "guest"
        self.preferences = {"theme": "light"}

# Update your LoginManager setup
login_manager = LoginManager(app)
login_manager.anonymous_user = CustomAnonymousUser

But for most cases, the default AnonymousUserMixin (which provides is_anonymous = True and other basic properties) is all you need.

What happens to current_user after login? #

Great question: current_user isn’t set to a standalone UserMixin object. Instead, your user model should inherit from UserMixin (or implement the required properties/methods it provides), and after login, current_user becomes an instance of your user model.

Here’s how to implement this properly:

1. Define your User model with UserMixin
   UserMixin gives you default implementations for critical methods like is_authenticated, is_active, get_id(), so you don’t have to write them from scratch:

   from flask_login import UserMixin
   from your_app import db
   
   class User(UserMixin, db.Model):
       id = db.Column(db.Integer, primary_key=True)
       username = db.Column(db.String(50), unique=True, nullable=False)
       password_hash = db.Column(db.String(200), nullable=False)
       # Add other fields like email, profile info, etc.
   

2. Set up the user loader callback
   Flask-Login needs to know how to fetch a user from their ID stored in the session. You define this with a decorator:

   @login_manager.user_loader
   def load_user(user_id):
       # Convert the stored string ID back to an integer and fetch the user
       return User.query.get(int(user_id))
   

3. Log the user in
   When you verify a user’s credentials (e.g., checking their password hash), call login_user() with their model instance:

   from flask_login import login_user
   
   @app.route('/login', methods=['POST'])
   def login():
       username = request.form.get('username')
       password = request.form.get('password')
       user = User.query.filter_by(username=username).first()
       
       if user and check_password_hash(user.password_hash, password):
           login_user(user)  # Stores the user's ID in the session
           return redirect('/dashboard')
       else:
           return "Invalid credentials"
   

After this, on every subsequent request, Flask-Login uses the load_user callback to fetch the user instance from the database and sets current_user to that instance. So current_user will be your User object (with all your custom fields) that inherits the properties from UserMixin (like is_authenticated = True).

Quick way to verify #

You can test this in any route to confirm the behavior:

from flask_login import current_user

@app.route('/')
def home():
    if current_user.is_anonymous:
        print(type(current_user))  # Output: <class 'flask_login.mixins.AnonymousUserMixin'>
        return "Welcome, guest!"
    else:
        print(type(current_user))  # Output: <class 'your_app.models.User'>
        return f"Welcome back, {current_user.username}!"

内容的提问来源于stack exchange，提问作者Bruce