장고 기초 #7 Django Admin과 built-in 인증

from django.contrib import admin

from .models import Post

admin.site.register(Post)

uv run python manage.py createsuperuser

from django.contrib import admin

from .models import Post, Tag, Comment


@admin.register(Post)
class PostAdmin(admin.ModelAdmin):
    # 목록 화면
    list_display = ("title", "author", "is_published", "created_at")
    list_filter = ("is_published", "created_at", "author")
    search_fields = ("title", "content")
    date_hierarchy = "created_at"
    ordering = ("-created_at",)
    list_editable = ("is_published",)
    list_per_page = 25

    # 상세 화면
    fields = ("title", "author", "content", "tags", "is_published")
    readonly_fields = ("created_at", "updated_at")
    filter_horizontal = ("tags",)        # ManyToMany 위젯 개선
    autocomplete_fields = ("author",)    # FK가 많을 때 검색 자동완성
    prepopulated_fields = {"slug": ("title",)}  # title → slug 자동 생성


@admin.register(Tag)
class TagAdmin(admin.ModelAdmin):
    list_display = ("name", "slug")
    search_fields = ("name",)
    prepopulated_fields = {"slug": ("name",)}


admin.site.register(Comment)

from django.contrib import admin

from .models import Post, Comment


class CommentInline(admin.TabularInline):    # or StackedInline
    model = Comment
    extra = 1                                 # 빈 행 1개 추가
    fields = ("author", "body", "created_at")
    readonly_fields = ("created_at",)


@admin.register(Post)
class PostAdmin(admin.ModelAdmin):
    list_display = ("title", "author")
    inlines = [CommentInline]

from django.contrib.auth import get_user_model

User = get_user_model()   # 컨벤션 — settings.AUTH_USER_MODEL을 따라감

user = User.objects.create_user(
    username="curtis",
    email="me@example.com",
    password="secret123",   # 자동으로 해시됨
)

user.set_password("new-password")    # 비밀번호 변경
user.save()

user.check_password("new-password")  # → True

from django.contrib.auth.models import AbstractUser
from django.db import models


class User(AbstractUser):
    bio = models.TextField(blank=True)
    avatar = models.ImageField(upload_to="avatars/", blank=True, null=True)

AUTH_USER_MODEL = "accounts.User"

from django.contrib import admin
from django.urls import include, path

urlpatterns = [
    path("admin/", admin.site.urls),
    path("accounts/", include("django.contrib.auth.urls")),
    path("blog/", include("blog.urls")),
]

{% extends "base.html" %}

{% block content %}
<h1> 로그인</h1>
<form method="post">
  {% csrf_token %}
  {{ form.as_p }}
  <button type="submit"> 로그인</button>
</form>
{% if form.errors %}
  <p>아이디나 비밀번호가 잘못되었습니다.</p>
{% endif %}
<p><a href="{% url 'password_reset' %}">비밀번호를 잊으셨나요?</a></p>
{% endblock %}

LOGIN_URL = "/accounts/login/"
LOGIN_REDIRECT_URL = "/blog/"
LOGOUT_REDIRECT_URL = "/blog/"

from django.contrib.auth import login
from django.contrib.auth.forms import UserCreationForm
from django.shortcuts import redirect, render


def signup(request):
    if request.method == "POST":
        form = UserCreationForm(request.POST)
        if form.is_valid():
            user = form.save()
            login(request, user)
            return redirect("blog:post_list")
    else:
        form = UserCreationForm()
    return render(request, "registration/signup.html", {"form": form})

from django.contrib.auth.decorators import login_required


@login_required
def post_new(request):
    ...

def my_page(request):
    if request.user.is_authenticated:
        username = request.user.username
        ...

{% if user.is_authenticated %}
  <p>{{ user.username }} 님 환영합니다.</p>
  <a href="{% url 'logout' %}"> 로그아웃</a>
{% else %}
  <a href="{% url 'login' %}"> 로그인</a>
{% endif %}

from django.contrib.auth.decorators import permission_required


@permission_required("blog.delete_post", raise_exception=True)
def post_delete(request, post_id):
    ...

if request.user.has_perm("blog.change_post"):
    ...

{% if perms.blog.change_post %}
  <a href="...">수정</a>
{% endif %}