#Sessions Django issue

1 messages · Page 1 of 1 (latest)

worn current
#

after you authenticate then make a request, check the request headers

#

is session_id being sent inside cookie?

livid gust
#

after login:
csrftoken o4EJRzQKrGLpoYx2DWzdXTdzKrOOiJeJ
sessionid yknaf26ewobrhpje96dd3cjv5mnap8ov

#

cookie

#

Headers for profile:
X-CSRFToken: o4EJRzQKrGLpoYx2DWzdXTdzKrOOiJeJ
Authorization: Basic yknaf26ewobrhpje96dd3cjv5mnap8ov

worn current
#

this is not correct

#

when you are using session auth Authorization header is not used for auth

#

but the sessionid cookie

#

you need to check the cookie, not Authorization header

livid gust
#

i use Insomnia for testing

worn current
#

ok put the cookie in your header

livid gust
#

Cookie: sessionid=yknaf26ewobrhpje96dd3cjv5mnap8ov

#

right?

worn current
#

correct

livid gust
#

same problem

worn current
#

can you try it from a browser

livid gust
#

I don't have authorization form

worn current
#

I mean it shouldn't matter, hmm

#

debug is true?

livid gust
#

yes

worn current
#

login to admin page

livid gust
#

and?

worn current
#

then go to this endpoint

@api_view(['GET'])
@permission_classes([IsAuthenticated])
def api_public_user_profile(request):
    user = request.user
    user_profile = PublicUser.objects.get(user=user.id)
    serializer = PublicUserSerializer(user_profile)

    return Response({'user': serializer.data}, status=status.HTTP_200_OK)
#

whatever the url is

livid gust
#

it use another model

#

PublicUser

#

not standart

worn current
#

you are not supposed to have multiple user models

livid gust
#

I have 2 models

worn current
#

you can't

#

you shouldn't

livid gust
#

why?

worn current
#

if you want public/manager/freebie whatever, use permissions

#

because it will break things as you can see

livid gust
#

I need to add other fields to this model and I have created a separate one

worn current
#

libraries use get_user_model to determine what user model is being used

#

then create your custom model?

livid gust
#

where do I use "get_user_model"?

worn current
#

anytime when you need the user model

#

and maybe use one of the auth libraries along with drf to make things easier, dj-rest-auth, djoser etc

livid gust
#

How do I use it if I need to use 2 models?

worn current
#

why do you need 2 models?

livid gust
#

for admin panel and public site

worn current
#

admin panel access is determined by is_staff attribute of user model, when you create a user is_staff is False so user can't access admin anyway?

livid gust
#

2 models cannot be used?

worn current
#

no, and you still didn't answer why you would need 2 models

livid gust
#

Okay, I'll try, thanks