NotImplementedError：Django 没有为 AnonymousUser 提供 DB 表示

Question

我收到以下错误：

Traceback:

 File "C:\Users\HP\GST\lib\site-packages\django\core\handlers\exception.py" 
 in inner
 35.             response = get_response(request)

 File "C:\Users\HP\GST\lib\site-packages\django\core\handlers\base.py" in 
  _get_response
  128.                 response = self.process_exception_by_middleware(e, 
 request)

 File "C:\Users\HP\GST\lib\site-packages\django\core\handlers\base.py" in 
 _get_response
 126.                 response = wrapped_callback(request, *callback_args, 
 **callback_kwargs)

  File "C:\Users\HP\Desktop\erpcloud\accounts\views.py" in change_password
   31.         if form.is_valid():

 File "C:\Users\HP\GST\lib\site-packages\django\forms\forms.py" in is_valid
 179.         return self.is_bound and not self.errors

File "C:\Users\HP\GST\lib\site-packages\django\forms\forms.py" in errors
 174.             self.full_clean()

 File "C:\Users\HP\GST\lib\site-packages\django\forms\forms.py" in 
 full_clean
  376.         self._clean_fields()

 File "C:\Users\HP\GST\lib\site-packages\django\forms\forms.py" in 
_clean_fields
 397.                     value = getattr(self, 'clean_%s' % name)()

  File "C:\Users\HP\GST\lib\site-packages\django\contrib\auth\forms.py" in 
 clean_old_password
  366.         if not self.user.check_password(old_password):

 File "C:\Users\HP\GST\lib\site-packages\django\contrib\auth\models.py" in 
 check_password
  396.         raise NotImplementedError("Django doesn't provide a DB 
  representation for AnonymousUser.")

  Exception Type: NotImplementedError at /accounts/change-password/
   Exception Value: Django doesn't provide a DB representation for 
  AnonymousUser.

My view looks like this:

def change_password(request):
    if request.method == 'POST':
        form = PasswordChangeForm(data=request.POST, user=request.user)

        if form.is_valid():
            form.save()
            update_session_auth_hash(request, user)
            return redirect(reverse('company:Dashboard'))
        else:
            return redirect(reverse('accounts:change_password'))
    else:
        form = PasswordChangeForm(user=request.user)

        args = {'form': form}
        return render(request, 'accounts/change_password.html', args)

Firstly, I thought that this was due to the fact that I didn't have Django updated, but now I have, and I receive the same error.

I've looked at some solutions that other users asked, but none applied in my case

Any help, please ?

Answer 1

视图本身没有任何问题。问题是如果一个用户没有登录，那么request.user就会指向一个AnonymousUser对象。您可以将其视为虚拟用户。然而，这个用户没有数据库表示，因为我们对用户一无所知。它更多地用于提供统一的接口。

现在因为request.user是AnonymousUser，您的目标是更改该用户的密码，但您无法将其存储到数据库中，因此出现错误。

因此，用户首先需要登录，然后request.user才是真正的用户，更新密码应该有效。

然而，我建议@login_required在视图中添加一个装饰器以防止这种情况发生：

from django.contrib.auth.decorators import login_required

@login_required
def change_password(request):
    if request.method == 'POST':
        form = PasswordChangeForm(data=request.POST, user=request.user)

        if form.is_valid():
            form.save()
            update_session_auth_hash(request, user)
            return redirect(reverse('company:Dashboard'))
        else:
            return redirect(reverse('accounts:change_password'))
    else:
        form = PasswordChangeForm(user=request.user)

        args = {'form': form}
        return render(request, 'accounts/change_password.html', args)