from ldap3 import Server,Connection,SIMPLE,SYNC,ALL,SASL,NTLM,SUBTREE,ALL_ATTRIBUTES,ALL_OPERATIONAL_ATTRIBUTES
import times = Server('10.210.12.17',get_info=ALL)def login(username,password):c = Connection(s, user='head.yst%s'%username, password=password, authentication=NTLM)if not c.bind():result = {'result':'False'}return resultelse:c.search(search_base='dc=head,dc=yst',search_filter='(anr={})'.format(username),search_scope=SUBTREE,attributes=['displayName','title'],#  attributes=ALL_ATTRIBUTES)result = {'result':'Success','username':username,'fullname':str(c.entries[0]).split('n')[1].split(':')[1].lstrip(),'logintime':time.strftime('%Y-%m-%d %H:%M:%S',time.localtime(time.time()))}return result

{'result': 'Success', 'username': 'xcwang', 'fullname': '王小川', 'logintime': '2020-10-30 10:00:08'}

import time
import jwt#用户通过此脚本获取到token
def get_token(username, key):token_dict={'time':time.time(),'name':username}headers ={'alg':"HS256"}jwt_token=jwt.encode(token_dict,key,algorithm="HS256",headers=headers).decode()return jwt_token#对用户的token进行认证，确保是我们之前发出去的
def dec_token(token_key,key):try:data = jwt.decode(token_key, key , algorithms=['HS256'])['name']return dataexcept Exception as e:return e

末尾加上print(get_token('abc','123')),然后运行
eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0aW1lIjoxNjA0MDI0NjkzLjQzNDE2NiwibmFtZSI6ImFiYyJ9.0GSfXloR9Y7O9OD3wD-33ErotX58U13_dCOJ7BcMe_8将末尾的print改成print(dec_token('eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0aW1lIjoxNjA0MDI0NjkzLjQzNDE2NiwibmFtZSI6ImFiYyJ9.0GSfXloR9Y7O9OD3wD-33ErotX58U13_dCOJ7BcMe_8','123'))
再次运行，得到的结果为abc即可

from django.shortcuts import render,redirect
from functions import public_ldap_login,public_token_authdef login(request):#token的获取使用key'abcd.com.cn'if request.method == 'POST':#获取用户POST上来的用户名和密码un = request.POST.get('username')pd = request.POST.get('password')#判断用户名密码为非空，如果为空，则返回消息和login页面if un == '' or pd == '':res = render(request, 'login.html', context={'result':'用户名密码不能为空！'})return res#获取登录结果login_result = public_ldap_login.login(un,pd)#如果登录结果为false则返回页面和登录失败消息。if login_result['result'] == 'False':res = render(request, 'login.html', context={'result':'登陆失败，用户名密码错误，请检查！'})return res#如果登录成功则执行以下操作else:#如果session key中包含'login_from‘字段，则表示用户是从其它页面跳转到login的if 'login_from' in request.session.keys():#则为用户准备以下资源：1、跳转到login_from定义的页面，设置token，username，fullname，logintime的cookieres = redirect(request.session['login_from'])res.set_cookie('token',public_token_auth.get_token(un,'abcd.com.cn'),max_age=36000)res.set_cookie('username', un,max_age=36000)res.set_cookie('fullname',login_result['fullname'],max_age=36000)res.set_cookie('logintime',login_result['logintime'],max_age=36000)res.set_cookie('result','Success',max_age=36000)return res#如果session ky中不包含login_from字段，则直接返回login.html，并要求重新登录else:return render(request,'login.html')#如果使用非POST非GET的请求方法，则直接返回login页面，要求强制登录else:return render(request,'login.html')#下面定义个装饰器函数，一方面，实现登录逻辑，另外其它页面函数也方便调用。
def login_auth(fouc):def wrapper(request,*args,**kwargs):cookie_get = request.COOKIES #获取用户cookieuser_path = request.path #获取用户访问的path,非常重要！！#如果未曾认证，或cookie不完整，则直接重定向到login页面if 'token' not in cookie_get or 'username' not in cookie_get or cookie_get['username'] != public_token_auth.dec_token(cookie_get['token'],'abcd.com.cn') and user_path != '/login/': #设置request.session['login_from']为user_path！！request.session['login_from'] = user_path  return redirect('/login/')  # 此时用户的request.session中已经包含了user_path，登录成功后，可直接跳转至登录之前的页面#如果用户跳转到login页面之前的页面就是/login/，则直接返回login.htmlelif user_path == '/login/':request.session['login_from'] = '/'return render(request,'login.html')else:return fouc(request,*args,**kwargs)return wrapper@login_auth
def index(request):return render(request,'index.html')@login_auth
def infosearch(request):return render(request,'infosearch.html')