{"id":5900,"date":"2022-11-28T09:24:13","date_gmt":"2022-11-28T09:24:13","guid":{"rendered":"https:\/\/www.pythontutorial.net\/?page_id=5900"},"modified":"2023-08-17T09:30:50","modified_gmt":"2023-08-17T09:30:50","slug":"django-login","status":"publish","type":"page","link":"https:\/\/www.pythontutorial.net\/django-tutorial\/django-login\/","title":{"rendered":"Django Login"},"content":{"rendered":"\n

Summary<\/strong>: in this tutorial, you’ll learn how to create a Django login form that allows users to log in using a username and password.<\/p>\n\n\n\n

This tutorial begins where the Django Delete Form tutorial<\/a> left off.<\/p>\n\n\n\n

Create a new application #<\/a><\/h2>\n\n\n\n

First, create a new application<\/a> called users<\/code> by executing the startapp<\/code> command:<\/p>\n\n\n

django-admin startapp users<\/code><\/span><\/pre>\n\n\n
The project directory will look like this:<\/p>\n\n\n
\u251c\u2500\u2500 blog\n\u251c\u2500\u2500 db.sqlite3\n\u251c\u2500\u2500 manage.py\n\u251c\u2500\u2500 mysite\n\u251c\u2500\u2500 static\n\u251c\u2500\u2500 templates\n\u2514\u2500\u2500 users<\/code><\/span>Code language:<\/span> plaintext<\/span> (<\/span>plaintext<\/span>)<\/span><\/small><\/pre>\n\n\n
Second, register the users<\/code> application in the installed apps of the settings.py<\/code> of the project:<\/p>\n\n\n
INSTALLED_APPS = [\n<\/span><\/span>    'django.contrib.admin'<\/span>,\n<\/span><\/span>    'django.contrib.auth'<\/span>,\n<\/span><\/span>    'django.contrib.contenttypes'<\/span>,\n<\/span><\/span>    'django.contrib.sessions'<\/span>,\n<\/span><\/span>    'django.contrib.messages'<\/span>,\n<\/span><\/span>    'django.contrib.staticfiles'<\/span>,\n<\/span><\/span>    # local<\/span>\n<\/span><\/span>    'blog.apps.BlogConfig'<\/span>,\n<\/span><\/span>    'users.apps.UsersConfig'<\/span>\n<\/span><\/mark>]\n<\/span><\/span><\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Third, create a new urls.py<\/code> file inside the users<\/code> app with the following code:<\/p>\n\n\n
from<\/span> django.urls import<\/span> path\nfrom<\/span> . import<\/span> views\n\nurlpatterns = []<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Finally, include the urls.py<\/code> of the users<\/code> application in the urls.py<\/code> of the project by using the include()<\/code> function:<\/p>\n\n\n
from<\/span> django.contrib import<\/span> admin\n<\/span><\/span>from<\/span> django.urls import<\/span> path, include\n<\/span><\/span>\n<\/span><\/span>urlpatterns = [\n<\/span><\/span>    path('admin\/'<\/span>, admin.site.urls),\n<\/span><\/span>    path(''<\/span>,include('blog.urls'<\/span>)),\n<\/span><\/span>    path(''<\/span>,include('users.urls'<\/span>))\n<\/span><\/mark>]\n<\/span><\/span><\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Create a login form #<\/a><\/h2>\n\n\n\n
First, create a login URL in the urls.py<\/code> of the users<\/code> application:<\/p>\n\n\n
from<\/span> django.urls import<\/span> path\nfrom<\/span> . import<\/span> views\n\nurlpatterns = [\n    path('login\/'<\/span>, views.sign_in, name='login'<\/span>),\n]<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Second, create a forms.py<\/code> file in the users<\/code> application and define the LoginForm<\/code> that inherits from the Form<\/code> class:<\/p>\n\n\n
from<\/span> django import<\/span> forms\n\n\nclass<\/span> LoginForm<\/span>(forms.Form)<\/span>:<\/span>\n    username = forms.CharField(max_length=65<\/span>)\n    password = forms.CharField(max_length=65<\/span>, widget=forms.PasswordInput)\n<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
The LoginForm<\/code> has two fields username and password. <\/p>\n\n\n\n
Third, create the sign_in()<\/code> function in the views.py<\/code> file of the users<\/code> application to render the login.html<\/code> template:<\/p>\n\n\n
from<\/span> django.shortcuts import<\/span> render\nfrom<\/span> .forms import<\/span> LoginForm\n\n\ndef<\/span> sign_in<\/span>(request)<\/span>:<\/span>\n    if<\/span> request.method == 'GET'<\/span>:\n        form = LoginForm()\n        return<\/span> render(request, 'users\/login.html'<\/span>, {'form'<\/span>: form})\n<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Fourth, create the templates\/users<\/code> directory inside the users<\/code> application:<\/p>\n\n\n
mkdir templates\ncd templates\nmkdir users<\/code><\/span>Code language:<\/span> plaintext<\/span> (<\/span>plaintext<\/span>)<\/span><\/small><\/pre>\n\n\n
Fifth, create the login.html<\/code> template inside the templates\/users<\/code> directory that extends the base.html<\/code> template:<\/p>\n\n\n
{% extends 'base.html' %}\n\n{% block content %}\n<form<\/span> method<\/span>=\"POST\"<\/span> novalidate<\/span>><\/span>\n\t{% csrf_token %}\n\t<h2<\/span>><\/span>Login<\/h2<\/span>><\/span>\n\t{{form.as_p}}\n\t<input<\/span> type<\/span>=\"submit\"<\/span> value<\/span>=\"Login\"<\/span> \/><\/span>\n<\/form<\/span>><\/span>\n\n{% endblock content%}<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
Sixth, open the login URL, and you’ll see the login form:<\/p>\n\n\n
http://127.0.0.1:8000\/login<\/code><\/span>Code language:<\/span> plaintext<\/span> (<\/span>plaintext<\/span>)<\/span><\/small><\/pre>\n\n\n
\"\"<\/figure>\n\n\n\n
If you enter a username\/password and click the Login button, you’ll get an error because we haven’t added the code that handles the HTTP POST request yet.<\/p>\n\n\n\n
Seventh, modify the sign_in()<\/code> function to handle the login process:<\/p>\n\n\n
from<\/span> django.shortcuts import<\/span> render, redirect\n<\/span><\/span>from<\/span> django.contrib import<\/span> messages\n<\/span><\/span>from<\/span> django.contrib.auth import<\/span> login, authenticate\n<\/span><\/mark>from<\/span> .forms import<\/span> LoginForm\n<\/span><\/span>\n<\/span><\/span>\n<\/span><\/span>def<\/span> sign_in<\/span>(request)<\/span>:<\/span>\n<\/span><\/span>\n<\/span><\/span>    if<\/span> request.method == 'GET'<\/span>:\n<\/span><\/span>        form = LoginForm()\n<\/span><\/span>        return<\/span> render(request,'users\/login.html'<\/span>, {'form'<\/span>: form})\n<\/span><\/span>    \n<\/span><\/span>    elif<\/span> request.method == 'POST'<\/span>:\n<\/span><\/mark>        form = LoginForm(request.POST)\n<\/span><\/mark>        \n<\/span><\/mark>        if<\/span> form.is_valid():\n<\/span><\/mark>            username = form.cleaned_data['username'<\/span>]\n<\/span><\/mark>            password = form.cleaned_data['password'<\/span>]\n<\/span><\/mark>            user = authenticate(request,username=username,password=password)\n<\/span><\/mark>            if<\/span> user:\n<\/span><\/mark>                login(request, user)\n<\/span><\/mark>                messages.success(request,f'Hi {username.title()}<\/span>, welcome back!'<\/span>)\n<\/span><\/mark>                return<\/span> redirect('posts'<\/span>)\n<\/span><\/mark>        \n<\/span><\/mark>        # form is not valid or user is not authenticated<\/span>\n<\/span><\/mark>        messages.error(request,f'Invalid username or password'<\/span>)\n<\/span><\/mark>        return<\/span> render(request,'users\/login.html'<\/span>,{'form'<\/span>: form})\n<\/span><\/mark><\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
How it works.<\/p>\n\n\n\n
First, import the authenticate<\/code> and login<\/code> function from the django.contrib.auth<\/code> module:<\/p>\n\n\n
from<\/span> django.contrib.auth import<\/span> login, authenticate<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
The authenticate()<\/code> function verifies a username and password. If the username and password are valid, it returns an instance of User<\/code> class or None<\/code> otherwise.<\/p>\n\n\n\n
The login()<\/code> function logs a user in. Technically, it creates a session id on the server and sends it back to the web browser in the form of a cookie. <\/p>\n\n\n\n
In the subsequent request, the web browser sends the session id back to the web server, Django matches the cookie value with the session id and creates the User<\/code> object.<\/p>\n\n\n\n
Second, verify the username and password using the authenticate()<\/code> function if the form is valid:<\/p>\n\n\n
user = authenticate(request, username=username, password=password)<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Third, log the user in, create a flash message<\/a>, and redirect the user to the posts<\/code> URL if the username and password are valid:<\/p>\n\n\n
if<\/span> user:\n   login(request, user)\n   messages.success(request,f'Hi {user.username.title()}<\/span>, welcome back!'<\/span>)\n   return<\/span> redirect('posts'<\/span>)<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
Otherwise, create a flash error message and redirect the user back to the login page:<\/p>\n\n\n
messages.error(request,f'Invalid username or password'<\/span>)\nreturn<\/span> render(request,'users\/login.html'<\/span>)<\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
If you enter a username without a password and click the Login button, you’ll get the following error message:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
However, if you enter the correct username\/password, you’ll be redirected to the post list page with a welcome message:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Add a Logout form #<\/a><\/h2>\n\n\n\n
First, define a route for logging a user out:<\/p>\n\n\n
from<\/span> django.urls import<\/span> path\nfrom<\/span> . import views\n\nurlpatterns = [\n    path('login\/'<\/span>, views.sign_in, name='login'<\/span>),\n    path('logout\/'<\/span>, views.sign_out, name='logout'<\/span>),\n]<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Second, define the sign_out()<\/code> function in the views.py<\/code> file that handles the logout route:<\/p>\n\n\n
from<\/span> django.shortcuts import<\/span> render, redirect\n<\/span><\/span>from<\/span> django.contrib import<\/span> messages\n<\/span><\/span>from<\/span> django.contrib.auth import<\/span> login, authenticate, logout\n<\/span><\/mark>from<\/span> .forms import<\/span> LoginForm\n<\/span><\/span>\n<\/span><\/span>def<\/span> sign_in<\/span>(request)<\/span>:<\/span>\n<\/span><\/span>\n<\/span><\/span>    if<\/span> request.method == 'GET'<\/span>:\n<\/span><\/span>        form = LoginForm()\n<\/span><\/span>        return<\/span> render(request,'users\/login.html'<\/span>, {'form'<\/span>: form})\n<\/span><\/span>    \n<\/span><\/span>    elif<\/span> request.method == 'POST'<\/span>:\n<\/span><\/span>        form = LoginForm(request.POST)\n<\/span><\/span>        \n<\/span><\/span>        if<\/span> form.is_valid():\n<\/span><\/span>            username = form.cleaned_data['username'<\/span>]\n<\/span><\/span>            password=form.cleaned_data['password'<\/span>]\n<\/span><\/span>            user = authenticate(request,username=username,password=password)\n<\/span><\/span>            if<\/span> user:\n<\/span><\/span>                login(request, user)\n<\/span><\/span>                messages.success(request,f'Hi {username.title()}<\/span>, welcome back!'<\/span>)\n<\/span><\/span>                return<\/span> redirect('posts'<\/span>)\n<\/span><\/span>        \n<\/span><\/span>        # either form not valid or user is not authenticated<\/span>\n<\/span><\/span>        messages.error(request,f'Invalid username or password'<\/span>)\n<\/span><\/span>        return<\/span> render(request,'users\/login.html'<\/span>,{'form'<\/span>: form})\n<\/span><\/span>    \n<\/span><\/span>    \n<\/span><\/span>        \n<\/span><\/span>def<\/span> sign_out<\/span>(request)<\/span>:<\/span>\n<\/span><\/mark>    logout(request)\n<\/span><\/mark>    messages.success(request,f'You have been logged out.'<\/span>)\n<\/span><\/mark>    return<\/span> redirect('login'<\/span>)        \n<\/span><\/mark><\/code><\/span>Code language:<\/span> Python<\/span> (<\/span>python<\/span>)<\/span><\/small><\/pre>\n\n\n
If you log in and access the login page, you’ll still see the login form. Therefore, it’s better to redirect the logged user to the post list instead if the user accesses the login page.<\/p>\n\n\n\n
Third, modify the sign_in()<\/code> function in the views.py<\/code> of the users<\/code> application:<\/p>\n\n\n
def sign_in(request):\n<\/span><\/span>\n<\/span><\/span>    if<\/span> request.method == 'GET'<\/span>:\n<\/span><\/span>        if<\/span> request.user.is_authenticated:\n<\/span><\/mark>            return<\/span> redirect('posts'<\/span>)\n<\/span><\/mark>        \n<\/span><\/span>        form = LoginForm()\n<\/span><\/span>        return<\/span> render(request,'users\/login.html'<\/span>, {'form'<\/span>: form})\n<\/span><\/span>    \n<\/span><\/span>    elif request.method == 'POST'<\/span>:\n<\/span><\/span>        form = LoginForm(request.POST)\n<\/span><\/span>        \n<\/span><\/span>        if<\/span> form.is_valid():\n<\/span><\/span>            username = form.cleaned_data['username'<\/span>]\n<\/span><\/span>            password=form.cleaned_data['password'<\/span>]\n<\/span><\/span>            user = authenticate(request,username=username,password=password)\n<\/span><\/span>            if<\/span> user:\n<\/span><\/span>                login(request, user)\n<\/span><\/span>                messages.success(request,f'Hi {username.title()}, welcome back!'<\/span>)\n<\/span><\/span>                return<\/span> redirect('posts'<\/span>)\n<\/span><\/span>        \n<\/span><\/span>        # either form not valid or user is not authenticated<\/span>\n<\/span><\/span>        messages.error(request,f'Invalid username or password'<\/span>)\n<\/span><\/span>        return<\/span> render(request,'users\/login.html'<\/span>,{'form'<\/span>: form})\n<\/span><\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
The the request.user.is_authenticated<\/code> returns True<\/code> if a user is logged in or False<\/code> otherwise.<\/p>\n\n\n\n
Fourth, modify the base.html<\/code> template to include the logout link if the user is authenticated and the login link otherwise:<\/p>\n\n\n
{%load static %}\n<!DOCTYPE html<\/span>><\/span>\n<html<\/span> lang<\/span>=\"en\"<\/span>><\/span>\n  <head<\/span>><\/span>\n    <meta<\/span> charset<\/span>=\"UTF-8\"<\/span> \/><\/span>\n    <meta<\/span> name<\/span>=\"viewport\"<\/span> content<\/span>=\"width=device-width, initial-scale=1.0\"<\/span> \/><\/span>\n    <link<\/span> rel<\/span>=\"stylesheet\"<\/span> href<\/span>=\"{% static 'css\/style.css' %}\"<\/span> \/><\/span>\n    <script<\/span> src<\/span>=\"{% static 'js\/app.js' %}\"<\/span> defer<\/span>><\/span><\/script<\/span>><\/span>\n    <title<\/span>><\/span>My Site<\/title<\/span>><\/span>\n  <\/head<\/span>><\/span>\n  <body<\/span>><\/span>\n  \t<header<\/span>><\/span>\n  \t\t{%if request.user.is_authenticated %}\n  \t\t\t<span<\/span>><\/span>Hi {{ request.user.username | title }}<\/span<\/span>><\/span>\n  \t\t\t<a<\/span> href<\/span>=\"{% url 'logout' %}\"<\/span>><\/span>Logout<\/a<\/span>><\/span>\n  \t\t{%else%}\n  \t\t\t<a<\/span> href<\/span>=\"{% url 'login' %}\"<\/span>><\/span>Login<\/a<\/span>><\/span>\n  \t\t{%endif%}\n  \t<\/header<\/span>><\/span>\n  \t<main<\/span>><\/span>\n\t  \t{% if messages %}\n\t\t\t<div<\/span> class<\/span>=\"messages\"<\/span>><\/span>\n\t\t\t{% for message in messages %}\n\t\t\t\t<div<\/span> class<\/span>=\"alert {% if message.tags %}alert-{{ message.tags }}\"<\/span>{% endif<\/span> %}><\/span>\n\t\t\t\t\t{{ message }}\n\t\t\t\t<\/div<\/span>><\/span>\n\t\t\t{% endfor %}\n\t\t\t<\/div<\/span>><\/span>\n\t\t{% endif %}\n\t\t    \n\t    {%block content%} \n\t    {%endblock content%}\n  \t<\/main<\/span>><\/span>\n\t\n  <\/body<\/span>><\/span>\n<\/html<\/span>><\/span><\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
If you access the site, you’ll see the login link:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
When you click the login link, it’ll open the login page:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
If you enter the valid username and password and log in, you’ll see a welcome message as well as the logout link:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
If you click the logout link, it redirects to the login page:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Hiding the edit and delete links on the post list #<\/a><\/h2>\n\n\n\n
If a user is logged in, the request.user.is_authenticated<\/code> is True<\/code>. Therefore, you can use this object to show and hide elements of the page whether the user is logged in or not.<\/p>\n\n\n\n
For example, the following hides the editing and deleting links on the blog\/home.html<\/code> template if the user is authenticated:<\/p>\n\n\n
{% extends 'base.html' %}\n<\/span><\/span>\t\n<\/span><\/span>{% block content %}\n<\/span><\/span><h1<\/span>><\/span>My Posts<\/h1<\/span>><\/span>\n<\/span><\/span>\t{% for post in posts %}\n<\/span><\/span>\t\t<h2<\/span>><\/span>{{ post.title }}<\/h2<\/span>><\/span>\n<\/span><\/span>\t\t<small<\/span>><\/span>Published on {{ post.published_at | date:\"M d, Y\" }} by {{ post.author | title}}<\/small<\/span>><\/span>\n<\/span><\/span>\t\t<p<\/span>><\/span>{{ post.content }}<\/p<\/span>><\/span>\n<\/span><\/span>\t\t\n<\/span><\/span>\t\t{% if request.user.is_authenticated %}\n<\/span><\/mark>\t\t<p<\/span>><\/span>\n<\/span><\/span>\t\t\t<a<\/span> href<\/span>=\"{% url 'post-edit' post.id %}\"<\/span>><\/span>Edit<\/a<\/span>><\/span> \n<\/span><\/span>\t\t\t<a<\/span> href<\/span>=\"{% url 'post-delete' post.id%}\"<\/span>><\/span>Delete<\/a<\/span>><\/span>\n<\/span><\/span>\t\t<\/p<\/span>><\/span>\n<\/span><\/span>\t\t{% endif %}\n<\/span><\/mark>\t\t\n<\/span><\/span>\t{% endfor %}\n<\/span><\/span>{% endblock content %}\n<\/span><\/span><\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
Protecting the protected pages #<\/a><\/h2>\n\n\n\n
Typically, you should allow authenticated users to access the creating, updating, and deleting post pages. To do that you can use Django’s login_required<\/code> decorator.<\/p>\n\n\n\n
If a view function has the login_required<\/code> decorator and an unauthenticated user attempts to run it, Django will redirect the user to the login page.<\/p>\n\n\n\n
We’ll protect the create, update, and delete post functions using the login_required<\/code> decorator.<\/p>\n\n\n\n
First, set the login URL in the settings.py<\/code> of to the login URL:<\/p>\n\n\n
LOGIN_URL = 'login'<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
If you don’t do this, Django will redirect to the default login URL which is accounts\/login\/<\/code> not users\/login<\/code> as we defined in this project.<\/p>\n\n\n\n
Second, modify the views.py<\/code> of the blog<\/code> application by adding the @login_required<\/code> decorator to the create_post<\/code>, edit_post<\/code>, and delete_post<\/code> functions:<\/p>\n\n\n
from<\/span> django.shortcuts import<\/span> render, redirect, get_object_or_404\n<\/span><\/span>from<\/span> django.contrib import<\/span> messages\n<\/span><\/span>from<\/span> django.contrib.auth.decorators import<\/span> login_required\n<\/span><\/mark>from<\/span> .models import<\/span> Post\n<\/span><\/span>from<\/span> .forms import<\/span> PostForm\n<\/span><\/span>\n<\/span><\/span>\n<\/span><\/span>@login_required\n<\/span><\/mark>def delete_post(request, id):\n<\/span><\/span>    post = get_object_or_404(Post, pk=id)\n<\/span><\/span>    context = {'post'<\/span>: post}\n<\/span><\/span>\n<\/span><\/span>    if<\/span> request.method == 'GET'<\/span>:\n<\/span><\/span>        return<\/span> render(request, 'blog\/post_confirm_delete.html'<\/span>, context)\n<\/span><\/span>    elif request.method == 'POST'<\/span>:\n<\/span><\/span>        post.delete()\n<\/span><\/span>        messages.success(request,  'The post has been deleted successfully.'<\/span>)\n<\/span><\/span>        return<\/span> redirect('posts'<\/span>)\n<\/span><\/span>\n<\/span><\/span>\n<\/span><\/span>@login_required\n<\/span><\/mark>def edit_post(request, id):\n<\/span><\/span>    post = get_object_or_404(Post, id=id)\n<\/span><\/span>\n<\/span><\/span>    if<\/span> request.method == 'GET'<\/span>:\n<\/span><\/span>        context = {'form'<\/span>: PostForm(instance=post), 'id'<\/span>: id}\n<\/span><\/span>        return<\/span> render(request, 'blog\/post_form.html'<\/span>, context)\n<\/span><\/span>\n<\/span><\/span>    elif request.method == 'POST'<\/span>:\n<\/span><\/span>        form = PostForm(request.POST, instance=post)\n<\/span><\/span>        if<\/span> form.is_valid():\n<\/span><\/span>            form.save()\n<\/span><\/span>            messages.success(\n<\/span><\/span>                request, 'The post has been updated successfully.'<\/span>)\n<\/span><\/span>            return<\/span> redirect('posts'<\/span>)\n<\/span><\/span>        else<\/span>:\n<\/span><\/span>            messages.error(request, 'Please correct the following errors:'<\/span>)\n<\/span><\/span>            return<\/span> render(request, 'blog\/post_form.html'<\/span>, {'form'<\/span>: form})\n<\/span><\/span>\n<\/span><\/span>\n<\/span><\/span>@login_required\n<\/span><\/mark>def create_post(request):\n<\/span><\/span>    if<\/span> request.method == 'GET'<\/span>:\n<\/span><\/span>        context = {'form'<\/span>: PostForm()}\n<\/span><\/span>        return<\/span> render(request, 'blog\/post_form.html'<\/span>, context)\n<\/span><\/span>    elif request.method == 'POST'<\/span>:\n<\/span><\/span>        form = PostForm(request.POST)\n<\/span><\/span>        if<\/span> form.is_valid():\n<\/span><\/span>            form.save()\n<\/span><\/span>            messages.success(\n<\/span><\/span>                request, 'The post has been created successfully.'<\/span>)\n<\/span><\/span>            return<\/span> redirect('posts'<\/span>)\n<\/span><\/span>        else<\/span>:\n<\/span><\/span>            messages.error(request, 'Please correct the following errors:'<\/span>)\n<\/span><\/span>            return<\/span> render(request, 'blog\/post_form.html'<\/span>, {'form'<\/span>: form})\n<\/span><\/span>\n<\/span><\/span>\n<\/span><\/span>def home(request):\n<\/span><\/span>    posts = Post.objects.all()\n<\/span><\/span>    context = {'posts'<\/span>: posts}\n<\/span><\/span>    return<\/span> render(request, 'blog\/home.html'<\/span>, context)\n<\/span><\/span>\n<\/span><\/span>\n<\/span><\/span>def about(request):\n<\/span><\/span>    return<\/span> render(request, 'blog\/about.html'<\/span>)\n<\/span><\/span>\n<\/span><\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
If you open the create, update, or delete URL, for example:<\/p>\n\n\n
http:\/\/127.0.0.1\/post\/create<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
It’ll be redirected to the login page.<\/p>\n\n\n\n
Summary #<\/a><\/h2>\n\n\n\n
    \n
  • Use authenticate()<\/code> function to verify a user by username and password.<\/li>\n\n\n\n
  • Use login()<\/code> function to log a user in.<\/li>\n\n\n\n
  • Use logout()<\/code> function to log a user out.<\/li>\n\n\n\n
  • Use request.user.is_authenticated<\/code> to check if the current user is authenticated.<\/li>\n\n\n\n
  • User @login_required<\/code> decorator to protect pages from unauthenticated users.<\/li>\n<\/ul>\n
    \n\t
    \n\t\t
    Was this tutorial helpful ?<\/div>\n\t\t
    \n\t\t\t\n\t\t\t\t\n\t\t\t\t\t<\/path>\n\t\t\t\t<\/svg>\n\t\t\t\t Yes <\/span>\n\t\t\t<\/button>\n\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t<\/path>\n\t\t\t\t<\/svg>\n\t\t\t\t No <\/span>\n\t\t\t<\/button>\n\t\t<\/div>\n\t<\/header>\n\n\t
    \n\t\t
    \n\t\t\t
    <\/div>\n\t\t\t
Download the Django Project source code<\/a><\/p>\n\n\n\n