def authenticated(method):
@functools.wraps(method)def wrapper(self, *args, **kwargs):if not self.current_user:if self.request.method in ("GET", "HEAD"):url = self.get_login_url()if "?" not in url:if urlparse.urlsplit(url).scheme:# if login url is absolute, make next absolute toonext_url = self.request.full_url()else:next_url = self.request.uriurl += "?" + urlencode(dict(next=next_url))self.redirect(url)returnraise HTTPError(403)return method(self, *args, **kwargs)return wrapperdef get_login_url(self):"""Override to customize the login URL based on the request.By default, we use the ``login_url`` application setting."""self.require_setting("login_url", "@tornado.web.authenticated")return self.application.settings["login_url"]def redirect(self, url, permanent=False, status=None):if self._headers_written:raise Exception("Cannot redirect after headers have been written")if status is None:status = 301 if permanent else 302else:assert isinstance(status, int) and 300 <= status <= 399self.set_status(status)self.set_header("Location", utf8(url))self.finish()

 1 def authenticated(func):
 2     """
 3     重写tornado authenticated
 4     :param func:
 5     :return:
 6     """
 7
 8     async def wrapper(self, *args, **kwargs):
 9         res_data = {}
10         token = self.request.headers.get("token")
11         if token:
12             try:
13                 send_data = jwt.decode(
14                     token, self.settings["secret_key"],
15                     leeway=self.settings["jwt_expire"],
16                     options={"verify_exp": True}
17                 )
18                 user_id = send_data["id"]
19
20                 # 从数据库中获取到user并设置给_current_user
21                 try:
22                     user = await self.application.objects.get(
23                         User, id=user_id
24                     )
25                     self._current_user = user
26
27                     result = await func(self, *args, **kwargs)
28                     return result
29                 except User.DoesNotExist:
30                     res_data["content"] = "用户不存在"
31                     self.set_status(401)
32             except Exception as e:
33                 print(e)
34                 self.set_status(401)
35                 res_data["content"] = "token不合法或已过期"
36         else:
37             self.set_status(401)
38             res_data["content"] = "缺少token"
39
40         self.write(res_data)
41
42     return wrapper