Django之Cookie

cookie是什么？

保存在浏览器端“键值对”
服务端可以向用户浏览器端写cookie
客户端每次发请求时，会携带cookie去

应用场景：

投票
用户登录

1、获取Cookie：

request.COOKIES['key']
request.get_signed_cookie(key, default=RAISE_ERROR, salt='', max_age=None)
    参数：
        default: 默认值
           salt: 加密盐
        max_age: 后台控制过期时间

2、设置Cookie：

rep = HttpResponse(...) 或 rep ＝ render(request, ...)
 
rep.set_cookie(key,value,...)
rep.set_signed_cookie(key,value,salt='加密盐',...)
    参数：
        key,              键
        value='',         值
        max_age=None,     超时时间
        expires=None,     超时时间(IE requires expires, so set it if hasn't been already.)
        path='/',         Cookie生效的路径，/ 表示根路径，特殊的：跟路径的cookie可以被任何url的页面访问
        domain=None,      Cookie生效的域名
        secure=False,     https传输
        httponly=False    只能http协议传输，无法被JavaScript获取（不是绝对，底层抓包可以获取到也可以被覆盖）

set_cookie源码：

def set_cookie(self, key, value='', max_age=None, expires=None, path='/',
			   domain=None, secure=False, httponly=False):

由于cookie保存在客户端的电脑上，所以，JavaScript和jquery也可以操作cookie。

<script src='/static/js/jquery.cookie.js'></script>
$.cookie("list_pager_num", 30,{ path: '/' });

#urls.py
    url(r'^login/', views.login),
    url(r'^index/', views.index),
    
#views.py
from django.shortcuts import render,redirect,HttpResponse

def login(request):

    if request.method == "GET":
        return render(request,'login.html')
    else:
        user = request.POST.get("username")
        pwd = request.POST.get("password")
        print(user,pwd)
        if user == "alex" and pwd == "123":
            obj = redirect('/index/')
            obj.set_cookie('ticket','sdlfkjlakjfdlkfjdkljf')
            return obj
        else:
            return render(request,'login.html')

def index(request):
    # 去请求的cookie中找凭证
    tk = request.COOKIES.get("ticket")
    if not tk:
        return redirect('/login/')
    return render(request,'index.html')
    
    
#login.html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<body>

<form method="POST" action="/login/">
    <input type="text" name="username">
    <input type="password" name="password">
    <input type="submit" value="提交">

</form>

</body>
</html>

#index.html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<body>

<p>Welcome Pythoner!!!</p>

</body>
</html>

cookie基础使用

max_age和expires的区别：
max_age=None, 超时时间【推荐】
# obj.set_cookie('ticket','sdlfkjlak',max_age=10)

expires=None, 超时时间（需要调用datetime模板进行设置）
#import datetime
#from datetime import timedelta
#ct = datetime.datetime.utcnow()
#v = timedelta(seconds=10)
#value = ct + v
#obj.set_cookie('ticket','sdlfkjlak',expires=value)

#urls.py
    url(r'^li1/', views.li1),
    url(r'^li2/', views.li2),

#views.py
"path的使用"
def li1(request):
    print(request.COOKIES)
    obj = HttpResponse('OK')
    obj.set_cookie('k2','v2',path='/li1')
    return obj

def li2(request):
    print(request.COOKIES)
    obj = HttpResponse('OK')
    return obj

#只有li1能获取k2

cookie设置path

签名：

cookie签名
自定义签名

#urls.py
    url(r'^login/', views.login),
    url(r'^index/', views.index),

#views.py
from django.shortcuts import render,redirect,HttpResponse

def login(request):
    if request.method == "GET":
        return render(request,'login.html')
    else:
        user = request.POST.get("username")
        pwd = request.POST.get("password")
        print(user,pwd)
        if user == "alex" and pwd == "123":
            obj = redirect('/index/')
            import datetime
            from datetime import timedelta
            ct = datetime.datetime.utcnow()
            v = timedelta(seconds=10)
            value = ct + v
            # obj.set_cookie('ticket','sdlfkjlak',max_age=10)
            obj.set_signed_cookie('ticket','123123',salt='ppppppp')
            # obj.set_cookie('ticket','sdlfkjlak',expires=value)
            return obj
        else:
            return render(request,'login.html')

def index(request):
    # 去请求的cookie中找凭证
    tk = request.get_signed_cookie("ticket",salt='ppppppp')
    print(tk)
    if not tk:
        return redirect('/login/')
    return render(request,'index.html')
    

#index.html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<body>

<p>Welcome Pythoner!!!</p>

</body>
</html>

#login.html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<body>

<form method="POST" action="/login/">
    <input type="text" name="username">
    <input type="password" name="password">
    <input type="submit" value="提交">

</form>

</body>
</html>

cookie签名实例

#settings.py

#SIGNING_BACKEND就相当于TimestampSigner
SIGNING_BACKEND ="c1.MySigner"

#c1.py
from django.core.signing import TimestampSigner

class MySigner(TimestampSigner):
    #加签名
    def sign(self, value):
        return value+'123123123'

    #去签名
    def unsign(self, value, max_age=None):
        v = value[0:-8]
        return v

自定义签名