Flask框架Flask-Principal基本用法实例分析

本文实例讲述了Flask框架Flask-Principal基本用法。分享给大家供大家参考，具体如下：

Flask-Principal是Flask框架的一个扩展，主要主件是Identity，Needs，Permission和IdentityContext。

安装

pip install flask-principal

初始化

from flask_principal import Principalprincipal = Principal()principal.init_app(app)

权限管理

permissions.py

from flask-principal import Permission,RoleNeedfrom functools import wraps# 定义相关角色NORMAL = "NORMAL"ADMIN = "ADMIN"ROLES = (  ("NORMAL","普通用户"),  ("ADMIN","管理员"))admin_permission = Permission(RoleNeed(ADMIN))def admin_authority(func):  @wraps  def decorated_view(*args,**kwargs):    if admin_permission.can():      return func(*args,**kwargs)    else:      return "非Admin用户"  return decorated_view

添加Role Model

userinfo.py

from app import login_managerfrom app.db import Base,engine,sessionfrom sqlalchemy import Column,String,Integer,create_enginefrom sqlalchemy_utils.types.choice import ChoiceTypefrom flask_login import UserMixinfrom permissions import ADMIN,ROLESclass User(Base,UserMixin):  __tablename__ = "user"  id = Column(Integer,primary_key=True)  user = Column(String(16))  password = Column(String(16))  roles = Column(ChoiceType(ROLES),default=ADMIN)@login_manager.user_loadeddef user_loaded(id):  return session.query(User).filter_by(id=id).first()Base.metadata.create_all(engine)

使用user_loader装饰器的回调函数非常重要，它将决定user对象是否在登录状态。试想只有Admin权限操作的事情，那么此用户是必需先登录，否则无法验证Admin权限。更多Flask-Login相关操作可参考《Flask框架Flask-Login用法》

登录

验证用户与密码等是否正确，后执行Flask-Login登录操作，记录登录状态，验证用户权限

from app import appfrom flask import requestfrom flask_login import login_userfrom flask_principal import current_app,identity_changed,Identityfrom userinfo import Userfrom app.db import session@app.route("/login",methods=["POST"])def login():  user = request.form.get("user",None)  password = request.form.get("password",None)  if not user or not password:    ...  user = session.query(User).filter_by(user=user,password=password).first()  if not user:    ...  # 登录  login_user(user)  # 发送信号，载入用户权限  identity_changed.send(current_app._get_current_object(),identity=Identity(user.id))  return ...