{"title":"如何从 Apache 对 Django 的用户数据库进行认证","version":"4.2","locale":"zh-hans","docname":"howto/deployment/wsgi/apache-auth","url":"/zh-hans/4.2/howto/deployment/wsgi/apache-auth/","canonical":"https://djangodocs.dev/zh-hans/4.2/howto/deployment/wsgi/apache-auth/","summary":"使用 Apache 时，保持多个身份认证数据同步是一个常见的问题，你可以让 Apache 直接使用 Django 的 验证系统 。这要求 Apache 版本 >= 2.2，且 mod_wsgi >= 2.0。例如这样： 仅为已授权的用户直接从 Apache 提供 static/media 文件。 仅为有特定权限的 Django…","html":"

如何从 Apache 对 Django 的用户数据库进行认证Link to this heading#

\n

使用 Apache 时，保持多个身份认证数据同步是一个常见的问题，你可以让 Apache 直接使用 Django 的 验证系统。这要求 Apache 版本 >= 2.2，且 mod_wsgi >= 2.0。例如这样：

\n\n\n
\n

用 mod_wsgi 进行授权认证Link to this heading#

\n\n

确保 mod_wsgi 已经安装并激活，并且你已经按照步骤设置了:doc:Apache 的 mod_wsgi </howto/deployment/wsgi/modwsgi>。

\n

然后，编辑 Apache 配置，添加只允许授权用户查看的位置：

\n
Apache
WSGIScriptAlias / /path/to/mysite.com/mysite/wsgi.py\nWSGIPythonPath /path/to/mysite.com\n\nWSGIProcessGroup %{GLOBAL}\nWSGIApplicationGroup %{GLOBAL}\n\n<Location "/secret">\n    AuthType Basic\n    AuthName "Top Secret"\n    Require valid-user\n    AuthBasicProvider wsgi\n    WSGIAuthUserScript /path/to/mysite.com/mysite/wsgi.py\n</Location>\n
\n

WSGIAuthUserScript 指令告诉 mod_wsgi 在指定 wsgi 脚本中执行 check_password 函数，并传递从提示符获取的用户名和密码。在本例中， WSGIAuthUserScript 与 WSGIScriptAlias 一样，后者 由 django-admin startproject 创建，定义了应用。

\n\n

最后，编辑 WSGI 脚本 mysite.wsgi，通过导入 check_password 函数，将 Apache 的认证授权机制接续在你站点的授权机制之后:

\n
Code
import os\n\nos.environ["DJANGO_SETTINGS_MODULE"] = "mysite.settings"\n\nfrom django.contrib.auth.handlers.modwsgi import check_password\n\nfrom django.core.handlers.wsgi import WSGIHandler\n\napplication = WSGIHandler()\n
\n

以 /secret/ 开头的请求现在会要求用户认证。

\n

mod_wsgi 可达性控制机制文档 提供了其它授权机制和方法的更多细节和信息。

\n
\n

利用 mod_wsgi 和 Django 用户组(groups)进行授权Link to this heading#

\n

mod_wsgi 也提供了将组成员限制至特定路径的功能。

\n

在本例中，Apache 配置应该看起来像这样：

\n
Apache
WSGIScriptAlias / /path/to/mysite.com/mysite/wsgi.py\n\nWSGIProcessGroup %{GLOBAL}\nWSGIApplicationGroup %{GLOBAL}\n\n<Location "/secret">\n    AuthType Basic\n    AuthName "Top Secret"\n    AuthBasicProvider wsgi\n    WSGIAuthUserScript /path/to/mysite.com/mysite/wsgi.py\n    WSGIAuthGroupScript /path/to/mysite.com/mysite/wsgi.py\n    Require group secret-agents\n    Require valid-user\n</Location>\n
\n

要支持 WSGIAuthGroupScript 指令，同样的 WSGI 脚本 mysite.wsgi 必须也导入 groups_for_user 函数，函数会返回用户所属用户组的列表。

\n
Python
from django.contrib.auth.handlers.modwsgi import check_password, groups_for_user\n
\n

对 /secret 的请求现在也会要求用户是 "secret-agents" 用户组的成员。

\n
\n
","rootId":"how-to-authenticate-against-django-s-user-database-from-apache","toc":[{"title":"用 mod_wsgi 进行授权认证","anchor":"authentication-with-mod-wsgi","children":[{"title":"利用 mod_wsgi 和 Django 用户组(groups)进行授权","anchor":"authorization-with-mod-wsgi-and-django-groups","children":[]}]}],"breadcrumbs":[{"docname":"howto/index","title":"操作指南","url":"/zh-hans/4.2/howto/"},{"docname":"howto/deployment/index","title":"如何部署 Django","url":"/zh-hans/4.2/howto/deployment/"},{"docname":"howto/deployment/wsgi/index","title":"如何使用 WSGI 进行部署","url":"/zh-hans/4.2/howto/deployment/wsgi/"}],"prev":{"docname":"howto/deployment/wsgi/modwsgi","title":"如何使用 Apache 和 mod_wsgi 托管 Django","url":"/zh-hans/4.2/howto/deployment/wsgi/modwsgi/"},"next":{"docname":"howto/deployment/asgi/index","title":"如何使用 ASGI 来部署","url":"/zh-hans/4.2/howto/deployment/asgi/"},"formats":{"html":"/zh-hans/4.2/howto/deployment/wsgi/apache-auth/","markdown":"/zh-hans/4.2/howto/deployment/wsgi/apache-auth.md","json":"/zh-hans/4.2/howto/deployment/wsgi/apache-auth.json"},"source":"https://github.com/django/django/blob/stable/4.2.x/docs/howto/deployment/wsgi/apache-auth.txt","official":"https://docs.djangoproject.com/zh-hans/4.2/howto/deployment/wsgi/apache-auth/","inVersions":["6.1","6.0","5.2","5.1","5.0","4.2","4.1","4.0","3.2","3.1","3.0","2.2","2.1","2.0"],"inLocales":["en","zh-hans","fr","ja","id","it","pt-br","ko","es","el","pl"]}