Django基礎 #7 Django Admin とビルトイン認証

from django.contrib import admin

from .models import Post

admin.site.register(Post)

uv run python manage.py createsuperuser

from django.contrib import admin

from .models import Post, Tag, Comment


@admin.register(Post)
class PostAdmin(admin.ModelAdmin):
    # 一覧画面
    list_display = ("title", "author", "is_published", "created_at")
    list_filter = ("is_published", "created_at", "author")
    search_fields = ("title", "content")
    date_hierarchy = "created_at"
    ordering = ("-created_at",)
    list_editable = ("is_published",)
    list_per_page = 25

    # 詳細画面
    fields = ("title", "author", "content", "tags", "is_published")
    readonly_fields = ("created_at", "updated_at")
    filter_horizontal = ("tags",)        # ManyToMany ウィジェットの改善
    autocomplete_fields = ("author",)    # FK が多いときの検索オートコンプリート
    prepopulated_fields = {"slug": ("title",)}  # title → slug 自動生成


@admin.register(Tag)
class TagAdmin(admin.ModelAdmin):
    list_display = ("name", "slug")
    search_fields = ("name",)
    prepopulated_fields = {"slug": ("name",)}


admin.site.register(Comment)

from django.contrib import admin

from .models import Post, Comment


class CommentInline(admin.TabularInline):    # or StackedInline
    model = Comment
    extra = 1                                 # 空の行を 1 つ追加
    fields = ("author", "body", "created_at")
    readonly_fields = ("created_at",)


@admin.register(Post)
class PostAdmin(admin.ModelAdmin):
    list_display = ("title", "author")
    inlines = [CommentInline]

from django.contrib.auth import get_user_model

User = get_user_model()   # コンベンション — settings.AUTH_USER_MODEL に従う

user = User.objects.create_user(
    username="curtis",
    email="me@example.com",
    password="secret123",   # 自動でハッシュ化される
)

user.set_password("new-password")    # パスワード変更
user.save()

user.check_password("new-password")  # → True

from django.contrib.auth.models import AbstractUser
from django.db import models


class User(AbstractUser):
    bio = models.TextField(blank=True)
    avatar = models.ImageField(upload_to="avatars/", blank=True, null=True)

AUTH_USER_MODEL = "accounts.User"

from django.contrib import admin
from django.urls import include, path

urlpatterns = [
    path("admin/", admin.site.urls),
    path("accounts/", include("django.contrib.auth.urls")),
    path("blog/", include("blog.urls")),
]

{% extends "base.html" %}

{% block content %}
<h1>ログイン</h1>
<form method="post">
  {% csrf_token %}
  {{ form.as_p }}
  <button type="submit">ログイン</button>
</form>
{% if form.errors %}
  <p>ID またはパスワードが間違っています。</p>
{% endif %}
<p><a href="{% url 'password_reset' %}">パスワードを忘れた方はこちら</a></p>
{% endblock %}

LOGIN_URL = "/accounts/login/"
LOGIN_REDIRECT_URL = "/blog/"
LOGOUT_REDIRECT_URL = "/blog/"

from django.contrib.auth import login
from django.contrib.auth.forms import UserCreationForm
from django.shortcuts import redirect, render


def signup(request):
    if request.method == "POST":
        form = UserCreationForm(request.POST)
        if form.is_valid():
            user = form.save()
            login(request, user)
            return redirect("blog:post_list")
    else:
        form = UserCreationForm()
    return render(request, "registration/signup.html", {"form": form})

from django.contrib.auth.decorators import login_required


@login_required
def post_new(request):
    ...

def my_page(request):
    if request.user.is_authenticated:
        username = request.user.username
        ...

{% if user.is_authenticated %}
  <p>{{ user.username }} さんようこそ。</p>
  <a href="{% url 'logout' %}">ログアウト</a>
{% else %}
  <a href="{% url 'login' %}">ログイン</a>
{% endif %}

from django.contrib.auth.decorators import permission_required


@permission_required("blog.delete_post", raise_exception=True)
def post_delete(request, post_id):
    ...

if request.user.has_perm("blog.change_post"):
    ...

{% if perms.blog.change_post %}
  <a href="...">修正</a>
{% endif %}