def jwt_get_secret_key(payload=None):"""For enhanced security you may want to use a secret key based on user.
​This way you have an option to logout only this user if:- token is compromised- password is changed- etc."""if api_settings.JWT_GET_USER_SECRET_KEY:User = get_user_model()  # noqa: N806user = User.objects.get(pk=payload.get('user_id'))key = str(api_settings.JWT_GET_USER_SECRET_KEY(user))return keyreturn api_settings.JWT_SECRET_KEY

 'JWT_SECRET_KEY': settings.SECRET_KEY,

def jwt_payload_handler(user):username_field = get_username_field()username = get_username(user)
​warnings.warn('The following fields will be removed in the future: ''`email` and `user_id`. ',DeprecationWarning)
​payload = {'user_id': user.pk,'username': username,'exp': datetime.utcnow() + api_settings.JWT_EXPIRATION_DELTA}if hasattr(user, 'email'):payload['email'] = user.emailif isinstance(user.pk, uuid.UUID):payload['user_id'] = str(user.pk)
​payload[username_field] = username
​# Include original issued at time for a brand new token,# to allow token refreshif api_settings.JWT_ALLOW_REFRESH:payload['orig_iat'] = timegm(datetime.utcnow().utctimetuple())
​if api_settings.JWT_AUDIENCE is not None:payload['aud'] = api_settings.JWT_AUDIENCE
​if api_settings.JWT_ISSUER is not None:payload['iss'] = api_settings.JWT_ISSUER
​return payload

 def jwt_encode_handler(payload):key = api_settings.JWT_PRIVATE_KEY or jwt_get_secret_key(payload)return jwt.encode(payload,key,api_settings.JWT_ALGORITHM).decode('utf-8')
​

class ValidJwt(MiddlewareMixin):def process_request(self, request):# 保证设备登录的唯一性jwt_token = request.META.get('HTTP_AUTHORIZATION', None)if jwt_token is not None and jwt_token != "":data = {'token': jwt_token}try:valid_data = VerifyJSONWebTokenSerializer().validate(data)user = valid_data['user']except (InvalidSignatureError, ValidationError):# 找不到用户res = {"msg": "token invalid","code": "-1"}return HttpResponse(json.dumps(res), content_type='application/json', status=400)if user.jwt_token != data['token']:
​res = {"msg": "token error","code": "-2"}user.jwt_key = uuid.uuid4()user.save()return HttpResponse(json.dumps(res), content_type='application/json', status=400)else:print("pass")

class Jwt_Response(MiddlewareMixin):
​def process_response(self, request, response):if request.method != 'POST':return responseelse:if request.META['PATH_INFO'] == '/token/':  # 当请求获得token时
​rep_data = response.dataif  "token" in rep_data: #账号与密码有效valid_data = VerifyJSONWebTokenSerializer().validate(rep_data)user = valid_data['user']user.jwt_token = rep_data['token']user.save()return responseelse:print("没有响应token")return response