1.settings.py
里面配置
MIDDLEWARE_CLASSES = [
'django.middleware.security.SecurityMiddleware',
# 'django.contrib.sessions.middleware.SessionMiddleware',
'cos.session_middleware.CookieSessionMiddleware',
......
]
SESSION_ENGINE = 'django_sso_plugins.sessions'
SESSION_COOKIE_NAME = 'sid'
POS_SESSION_ENGINE = 'django.contrib.sessions.backends.db'
POS_SESSION_COOKIE_NAME = 'session_id'
2.重写SessionMidddleware
import time
from django.conf import settings
from django.utils.cache import patch_vary_headers
from django.utils.http import cookie_date
from importlib import import_module
class CookieSessionMiddleware(object):
def cookie_name_and_session_engine(self, request):
if request.path.startswith(u'/admin') or request.path.startswith(u'/xadmin'):
return settings.SESSION_COOKIE_NAME, settings.SESSION_ENGINE
return settings.POS_SESSION_COOKIE_NAME, settings.POS_SESSION_ENGINE
def process_request(self, request):
cookie_name, session_engine = self.cookie_name_and_session_engine(request)
engine = import_module(session_engine)
session_key = request.COOKIES.get(cookie_name, None)
request.session = engine.SessionStore(session_key)
def process_response(self, request, response):
"""
If request.session was modified, or if the configuration is to save the
session every time, save the changes and set a session cookie.
"""
try:
accessed = request.session.accessed
modified = request.session.modified
except AttributeError:
pass
else:
if accessed:
patch_vary_headers(response, ('Cookie',))
if modified or settings.SESSION_SAVE_EVERY_REQUEST:
if request.session.get_expire_at_browser_close():
max_age = None
expires = None
else:
max_age = request.session.get_expiry_age()
expires_time = time.time() + max_age
expires = cookie_date(expires_time)
# Save the session data and refresh the client cookie.
# Skip session save for 500 responses, refs #3881.
if response.status_code != 500:
request.session.save()
response.set_cookie(
self.cookie_name_and_session_engine(request)[0],
request.session.session_key, max_age=max_age,
expires=expires, domain=settings.SESSION_COOKIE_DOMAIN,
path=settings.SESSION_COOKIE_PATH,
secure=settings.SESSION_COOKIE_SECURE or None,
httponly=settings.SESSION_COOKIE_HTTPONLY or None
)
return response
网友评论