feat: add authentication using json web token

Author: Juan Benitez

.gitignore

@@ -106,3 +106,6 @@ venv.bak/
 
 # mypy
 .mypy_cache/
+
+# Database
+db.sqlite3

api_crud/settings.py

@@ -29,7 +29,7 @@
 
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': (
-        'rest_framework.authentication.TokenAuthentication',
+        'rest_framework_simplejwt.authentication.JWTAuthentication',
     )
 }
 
@@ -44,13 +44,8 @@
     'django.contrib.messages',
     'django.contrib.staticfiles',
     'rest_framework',
+    'authentication',
     'movies',
-    'rest_framework.authtoken',
-    'rest_auth',
-    'django.contrib.sites',
-    'allauth',
-    'allauth.account',
-    'rest_auth.registration',
 ]
 
 SITE_ID = 1

api_crud/urls.py

@@ -1,14 +1,10 @@
 
 from django.contrib import admin
-from django.conf.urls import include, url
-from .views import RegisterView, CustomLoginView
-
+from django.urls import include, path
 
 # urls
 urlpatterns = [
-    url(r'^', include('movies.urls')),
-    url(r'^rest-auth/login/', CustomLoginView.as_view()),
-    url(r'^rest-auth/registration/', RegisterView.as_view()),
-    url(r'^rest-auth/', include('rest_auth.urls')),
-    url(r'^admin/', admin.site.urls),
+    path('api/movies/', include('movies.urls')),
+    path('api/auth/', include('authentication.urls')),
+    path('admin/', admin.site.urls),
 ]

api_crud/views.py

@@ -1,57 +0,0 @@
-from django.utils.decorators import method_decorator
-from django.views.decorators.debug import sensitive_post_parameters
-from rest_framework.response import Response
-from rest_framework.generics import CreateAPIView
-from rest_framework import status
-from allauth.account.utils import complete_signup
-from allauth.account import app_settings as allauth_settings
-from rest_auth.models import TokenModel
-from rest_auth.views import LoginView
-from rest_auth.registration.app_settings import RegisterSerializer, register_permission_classes
-from django.contrib.auth.models import User
-
-sensitive_post_parameters_m = method_decorator(
-    sensitive_post_parameters('password1', 'password2')
-)
-
-
-class RegisterView(CreateAPIView):
-    serializer_class = RegisterSerializer
-    permission_classes = register_permission_classes()
-    token_model = TokenModel
-
-    @sensitive_post_parameters_m
-    def dispatch(self, *args, **kwargs):
-        return super(RegisterView, self).dispatch(*args, **kwargs)
-
-    def create(self, request, *args, **kwargs):
-        serializer = self.get_serializer(data=request.data)
-        serializer.is_valid(raise_exception=True)
-        user = self.perform_create(serializer)
-        headers = self.get_success_headers(serializer.data)
-        content = {
-            "details": "Registered"
-        }
-        return Response(content,
-                        status=status.HTTP_201_CREATED,
-                        headers=headers)
-
-    def perform_create(self, serializer):
-        user = serializer.save(self.request)
-
-        complete_signup(self.request._request, user, None, None)
-        return user
-
-
-class CustomLoginView(LoginView):
-    
-    def get_response(self):
-        orginal_response = super().get_response()
-
-        custom_response = {"user": {
-            "username": self.user.username,
-            "email": self.user.email
-        }}
-        
-        orginal_response.data.update(custom_response)
-        return orginal_response

authentication/__init__.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

authentication/admin.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class AuthConfig(AppConfig):
+    name = 'authentication'

authentication/apps.py

@@ -0,0 +1,3 @@
+from django.db import models
+
+# Create your models here.

authentication/migrations/__init__.py

@@ -0,0 +1,33 @@
+from rest_framework import serializers
+from django.contrib.auth.models import User
+from rest_framework.validators import UniqueValidator
+from django.contrib.auth.password_validation import validate_password
+
+
+class RegisterSerializer(serializers.ModelSerializer):
+    email = serializers.EmailField(
+        required=True,
+        validators=[UniqueValidator(queryset=User.objects.all())]
+    )
+
+    password = serializers.CharField(write_only=True, required=True, validators=[validate_password])
+    password2 = serializers.CharField(write_only=True, required=True)
+
+    class Meta:
+        model = User
+        fields = ('username', 'password', 'password2', 'email', 'first_name', 'last_name')
+
+    def validate(self, attrs):
+        if attrs['password'] != attrs['password2']:
+            raise serializers.ValidationError({"password": "Password fields didn't match."})
+
+        return attrs
+
+    def create(self, validated_data):
+        del validated_data['password2']
+        user = User.objects.create(**validated_data)
+
+        user.set_password(validated_data['password'])
+        user.save()
+
+        return user