方法视图(FBV)和类视图（CBV）添加装饰器

加在FBV视图上添加csrf装饰器：

1. from django.views.decorators.csrf import csrf_protect
2. @csrf_exempt # 该函数无需认证
3. @csrf_protect # 该函数需认证

   from django.views.decorators.csrf import csrf_exempt
   @csrf_exempt
   def index(request):
   
       return render(request,'index.html')
   
   @csrf_exempt #该函数无需认证
   def ajax_add(request):
       s1=int(request.GET.get('s1'))
       s2=int(request.GET.get('s2'))
   
       print(s1,s2)
       s=s1+s2
       return HttpResponse(s)

from django.utils.decorators import method_decorator

1. 加在CBV视图的get或post方法上

from django.utils.decorators import method_decorator


class HomeView(View):

    def dispatch(self, request, *args, **kwargs):
        return super(HomeView, self).dispatch(request, *args, **kwargs)

    def get(self, request):
        return render(request, "home.html")
    
    @method_decorator(check_login)
    def post(self, request):
        print("Home View POST method...")
        return redirect("/index/")

2. 加在dispatch方法上

from django.utils.decorators import method_decorator


class HomeView(View):

    @method_decorator(check_login)
    def dispatch(self, request, *args, **kwargs):
        return super(HomeView, self).dispatch(request, *args, **kwargs)

    def get(self, request):
        return render(request, "home.html")

    def post(self, request):
        print("Home View POST method...")
        return redirect("/index/")

因为CBV中首先执行的就是dispatch方法，所以这么写相当于给get和post方法都加上了登录校验。

3. 直接加在视图类上，但method_decorator必须传 name 关键字参数

如果get方法和post方法都需要登录校验的话就写两个装饰器。

from django.utils.decorators import method_decorator

 3 @method_decorator(check_login, name="get")
 4 @method_decorator(check_login, name="post")
class HomeView(View):

    def dispatch(self, request, *args, **kwargs):
        return super(HomeView, self).dispatch(request, *args, **kwargs)

    def get(self, request):
        return render(request, "home.html")

    def post(self, request):
        print("Home View POST method...")
        return redirect("/index/")

CSRF Token相关装饰器在CBV只能加到dispatch方法上，或者加在视图类上然后name参数指定为dispatch方法。

备注：

• csrf_protect，为当前函数强制设置防跨站请求伪造功能，即便settings中没有设置全局中间件。
• csrf_exempt，取消当前函数防跨站请求伪造功能，即便settings中设置了全局中间件。

  from django.views.decorators.csrf import csrf_exempt, csrf_protect
  from django.utils.decorators import method_decorator
  
  
  class HomeView(View):
  
      @method_decorator(csrf_exempt)
      def dispatch(self, request, *args, **kwargs):
          return super(HomeView, self).dispatch(request, *args, **kwargs)
  
      def get(self, request):
          return render(request, "home.html")
  
      def post(self, request):
          print("Home View POST method...")
          return redirect("/index/")

  或者：

  from django.views.decorators.csrf import csrf_exempt, csrf_protect
  from django.utils.decorators import method_decorator
  
  
  @method_decorator(csrf_exempt, name='dispatch')
  class HomeView(View):
     
      def dispatch(self, request, *args, **kwargs):
          return super(HomeView, self).dispatch(request, *args, **kwargs)
  
      def get(self, request):
          return render(request, "home.html")
  
      def post(self, request):
          print("Home View POST method...")
          return redirect("/index/")