Get inside your stronghold and make all your Django views default login_required
Stronghold is a very small and easy to use django app that makes all your Django project default to require login for all of your views.
WARNING: still in development, so some of the DEFAULTS and such will be changing without notice.
Install via pip.
pip install django-stronghold
Add stronghold to your INSTALLED_APPS in your Django settings file
INSTALLED_APPS = ( #... 'stronghold', )
Then add the stronghold middleware to your MIDDLEWARE_CLASSES in your Django settings file
MIDDLEWARE_CLASSES = ( #... 'stronghold.middleware.LoginRequiredMiddleware', )
If you followed the installation instructions now all your views are defaulting to require a login.
To make a view public again you can use the public decorator provided in
stronghold.decorators like so:
For function based views
from stronghold.decorators import public @public def someview(request): # do some work #...
for class based views
from django.utils.decorators import method_decorator from stronghold.decorators import public class SomeView(View): def get(self, request, *args, **kwargs): # some view logic #... @method_decorator(public) def dispatch(self, *args, **kwargs): return super(SomeView, self).dispatch(*args, **kwargs)
Use Strongholds defaults in addition to your own settings.
STRONGHOLD_DEFAULTS = True
You can add a tuple of url regexes in your settings file with the
STRONGHOLD_PUBLIC_URLS setting. Any url that matches against these patterns
will be made public without using the
STRONGHOLD_PUBLIC_URLS = ()
If STRONGHOLD_DEFAULTS is True STRONGHOLD_PUBLIC_URLS contains:
( r'^%s.+$' % settings.STATIC_URL, r'^%s.+$' % settings.MEDIA_URL, )
When settings.DEBUG = True. This is additive to your settings to support serving
Static files and media files from the development server. It does not replace any
settings you may have in
You can add a tuple of url names in your settings file with the
STRONGHOLD_NAMED_URLS setting. Names in this setting will be reversed using
django.core.urlresolvers.reverse and any url matching the output of the reverse
call will be made public without using the
STRONGHOLD_NAMED_URLS = ()
If STRONGHOLD_DEFAULTS is True additionally we search for
if it exists, we add the login and logout view names to
- Django 1.4.x
- Django 1.5