views.py 文件源码

def login(self, request):
        try:
            user = User.objects.get(phone=request.data.get('account'))
            password = make_password(request.data.get('password'), "a", 'pbkdf2_sha256')
            if user.password == password[22:54]:
                request.session['user'] = user.id
                return Response({'error': 0, 'user_id': user.id},
                                status=status.HTTP_200_OK)
            else:
                return Response({'error': 'password insistent'},
                                status=status.HTTP_400_BAD_REQUEST)
        except User.DoesNotExist:
            return Response({'error': "account does not exists"},
                            status=status.HTTP_400_BAD_REQUEST)