Django Custom User Authentication Backend

Introduction In some Django projects we need to customize user model. We don’t want to go with the Django’s existing user model because we need more fields in user model. Sometimes we want to login user with the unique-id of third party service like Facebook, Twitter and etc. In this blog I describe how to create custom user model and custom authentication backend to perform such requirements. Creating Custom User Model In this example I have created custom user model named as ‘Staff’. I have extended this Staff model with Django’s User model and added more fields in Member which I needed. from django.contrib.auth.models import User, UserManager from django.db import models class Designation(models.Model): key = models.CharField(max_length=5) name = models.CharField(max_length=32) def __unicode__(self): return str(self.name) class Staff(User): """User with app settings.""" avatar = models.ImageField(upload_to="static/member_avatar/", blank=True, null=True) designation = models.ForeignKey(Designation) # Use StaffManager to get the create_user method, etc. objects = StaffManager() class Meta(object): verbose_name = 'Staff' verbose_name_plural = 'Staffs' Changes Required in Settings File Then, in settings.py file you have to explicitly mention custom user model and custom authentication backend. AUTHENTICATION_BACKENDS = ('auth_backends.StaffModelBackend',) CUSTOM_USER_MODEL = 'app.Staff' Creating custom authentication backend Create the custom authentication backend class and in this class we have to change user_class property method to get user instance from our custom model instead of Django’s User model. We have mentioned this class in settings file so that Django will get user instance of our custom model using this class (instead of Django’s User model). from django.conf import settings from django.contrib.auth.backends import ModelBackend from django.core.exceptions import ImproperlyConfigured from django.db.models import get_model class StaffModelBackend(ModelBackend): def authenticate(self, username=None, password=None): try: user = self.user_class.objects.get(username=username) if user.check_password(password): return user except self.user_class.DoesNotExist: return None def get_user(self, user_id): try: return self.user_class.objects.get(pk=user_id) except self.user_class.DoesNotExist: return None @property def user_class(self): if not hasattr(self, '_user_class'): self._user_class = get_model(*settings.CUSTOM_USER_MODEL.split('.', 2)) if not self._user_class: raise ImproperlyConfigured('Could not get custom user model') return self._user_class Admin interface to add/edit custom User You can also make a admin interface of your custom user model (i.e Staff). In below example, I have created StaffAdmin class which is used by Django’s admin to create/modify an instance of custom user model. In this class I have changed the fieldsets to create and modify forms. from django.contrib import admin from django.contrib.auth.admin import UserAdmin from django.contrib.auth.forms import UserChangeForm, UserCreationForm from django.utils.translation import ugettext_lazy as _ from app.models import Staff class StaffChangeForm(UserChangeForm): class Meta(UserChangeForm.Meta): model = Staff class StaffCreationForm(UserCreationForm): class Meta(UserCreationForm.Meta): model = Staff class StaffAdmin(UserAdmin): form = StaffChangeForm add_form = StaffCreationForm fieldsets = ( (None, {'fields': ('username', 'password')}), (_('Personal info'), {'fields': ('first_name', 'last_name', 'email')}), (_('Permissions'), {'fields': ('is_active', 'is_staff', 'is_superuser', 'user_permissions')}), (_('Important dates'), {'fields': ('last_login', 'date_joined')}), (None, {'fields': ('designation', 'avatar')}), ) add_fieldsets = UserAdmin.add_fieldsets + ( (_('Personal info'), {'fields': ('first_name', 'last_name', 'email')}), (_('Permissions'), {'fields': ('is_active', 'is_staff', 'is_superuser', 'user_permissions')}), (None, {'fields': ('designation')}), ) admin.site.register(Staff, StaffAdmin) <========Thank You ========>
Introduction

In some Django projects we need to customize user model. We don’t want to go with the Django’s existing user model because we need more fields in user model. Sometimes we want to login user with the unique-id of third party service like Facebook, Twitter and etc.
In this blog I describe how to create custom user model and custom authentication backend to perform such requirements.

Creating Custom User Model

In this example I have created custom user model named as ‘Staff’. I have extended this Staff model with Django’s User model and added more fields in Member which I needed.

from django.contrib.auth.models import User, UserManager
from django.db import models

class Designation(models.Model):
key = models.CharField(max_length=5)
name = models.CharField(max_length=32)

def __unicode__(self):
return str(self.name)

class Staff(User):
"""User with app settings."""
avatar = models.ImageField(upload_to="static/member_avatar/", blank=True,
null=True)
designation = models.ForeignKey(Designation)

# Use StaffManager to get the create_user method, etc.
objects = StaffManager()

class Meta(object):
verbose_name = 'Staff'
verbose_name_plural = 'Staffs'

Changes Required in Settings File

Then, in settings.py file you have to explicitly mention custom user model and custom authentication backend.


AUTHENTICATION_BACKENDS = ('auth_backends.StaffModelBackend',)

CUSTOM_USER_MODEL = 'app.Staff'


Creating custom authentication backend

Create the custom authentication backend class and in this class we have to change user_class property method to get user instance from our custom model instead of Django’s User model. We have mentioned this class in settings file so that Django will get user instance of our custom model using this class (instead of Django’s User model).

from django.conf import settings
from django.contri

Be the first to comment

You can use [html][/html], [css][/css], [php][/php] and more to embed the code. Urls are automatically hyperlinked. Line breaks and paragraphs are automatically generated.