【Django】使用谷歌身份验证Google authenticator

ゝ一纸荒年。 2022-10-19 04:19 306阅读 0赞

#### 1.说明 ####

为了安全，可以使用Google authenticator作为二次验证的条件，使用起来很简单，只需要使用Google authenticator APP扫描一下二维码即可得到六位数验证码，验证码每30秒变一次

#### 2.代码 ####

模型类GoogleAuth

class GoogleAuth(models.Model):
        user_id = models.IntegerField(null=False, verbose_name="用户ID")
        user_name = models.CharField(null=False, max_length=255, verbose_name="用户名")
        token = models.CharField(null=False, max_length=255, verbose_name="秘钥")
        ...
        class Meta:
            db_table = "google_auth"
            verbose_name = "谷歌验证"
            verbose_name_plural = verbose_name

生成二维码和验证

import pyotp
    import traceback
    from qrcode import QRCode, constants
    # 生成二维码
    def get_google_qrcode(token, username):
        data = pyotp.totp.TOTP(token).provisioning_uri(username, issuer_name="wallet_webconsole")
        qr = QRCode(error_correction=constants.ERROR_CORRECT_L, version=1, box_size=6, border=4)
        try:
            qr.add_data(data)
            qr.make(fit=True)
            img = qr.make_image()
            # filepath = dirpath + os.sep + secret_key + '.png'
            # img.save(filepath) # 保存条形码图片
            # return filepath
            return img
        except Exception as e:
            traceback.print_exc()
            return None
    # 判断验证码是否正确
    def verify_google_code(token, code):
        t = pyotp.TOTP(token)
        result = t.verify(code)
        return result if result is True else False

视图函数

def Login(request):
        if request.method != "POST":
            return render(request, 'webconsole/login.html')
        username = request.POST.get("username")
        password = request.POST.get("password")
        auth_code = request.POST.get("auth_code")
        auth_code = int(auth_code) if auth_code and auth_code.isdigit() else None
        user = auth.authenticate(username=username, password=password)
        res_data = { 
            "code": 0
        }
        if not user:
            res_data.update({ "error": "账号或密码错误"})
            return JsonResponse(res_data)
        google_auth = GoogleAuth.objects.filter(user_id=user.id).first()
        if not google_auth:
            res_data.update({ "error": "还未绑定谷歌身份验证"})
            return JsonResponse(res_data)
        if auth_code:
            if not verify_google_code(google_auth.token, auth_code):
                res_data.update({ "code": 2})
                res_data.update({ "error": "请输入正确的谷歌验证码"})
                return JsonResponse(res_data)
            auth.login(request, user)
            res_data.update({ "code": 1})
            res_data.update({ "result": "登录成功"})
            return JsonResponse(res_data)
    
        qrcode = get_google_qrcode(google_auth.token, user.username)
        if not qrcode:
            res_data.update({ "error": "生成谷歌验证码失败"})
            return JsonResponse(res_data)
        # buf = BytesIO()
        # qrcode.save(buf)
        # image_stream = buf.getvalue()
    	# return HttpResponse(image_stream, content_type="image/png") # 返回二进制流
        out = BytesIO()
        qrcode.save(out, 'PNG')
        pic_base64 = base64.b64encode(out.getvalue()).decode('ascii')  # 返回base64
        res_data.update({ "code": 3})
        res_data.update({ "base64": pic_base64})
        return JsonResponse(res_data)

上面的demo是为了方便直接把很多代码都放在一起了，实际生产环境建议还是把视图函数的业务分开写