在Django REST framework中使用会话（Session）进行认证和授权

REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': [
        'rest_framework.authentication.SessionAuthentication',
    ],
    'DEFAULT_PERMISSION_CLASSES': [
        'rest_framework.permissions.IsAuthenticated',
    ],
}

from django.urls import path
from rest_framework.authtoken.views import obtain_auth_token
from .views import LoginView, LogoutView

urlpatterns = [
    path('api/token', obtain_auth_token, name='api_token_auth'),
    path('login', LoginView.as_view(), name='login'),
    path('logout', LogoutView.as_view(), name='logout')
]

from django.contrib.auth import authenticate, login, logout
from django.shortcuts import render
from rest_framework.views import APIView
from rest_framework.response import Response

class LoginView(APIView):
    def post(self, request):
        username = request.data.get('username')
        password = request.data.get('password')
        user = authenticate(request, username=username, password=password)
        if user is not None:
            login(request, user)
            return Response({'message': '登录成功'})
        else:
            return Response({'message': '用户名或密码错误'})

class LogoutView(APIView):
    def post(self, request):
        logout(request)
        return Response({'message': '退出登录'})

from rest_framework.views import APIView
from rest_framework.permissions import IsAuthenticated

class SomeView(APIView):
    permission_classes = [IsAuthenticated]
    def get(self, request):
        user = request.user
        # TODO: some logic with authenticated user