Re: How to authenticate a user in websocket connection in django channels when using token authentication

Hey, 

I've done this websocket authorization almost exactly like Robin, and it's working (like receiving token with query params, verifying it and things) but it's not properly opening connection (like its not sending accept: True, which I do after verification) and connection is permanently in pending state don't receiving anything. No errors in log or js console except ws connection timeouts.

Could anyone point at possible cause?

Best regards,

Dominik

W dniu piątek, 15 września 2017 19:09:57 UTC+2 użytkownik Andrew Godwin napisał:

You'll have to write your own authentication code that runs in `connect` and puts a user into the channel session - there's nothing built in that will really help you past that I'm afraid.

Andrew

On Thu, Sep 14, 2017 at 6:35 PM, Robin Lery <robi...@gmail.com> wrote:

I am using a frontend framework (Vuejs) and django-rest-framework for the REST API in my project. Also, for JSON web token authentication I am using django-rest-framework-jwt. After a successful login, the user is provided with a token. This token is passed into every request to fetch any API related stuff.

Now I would like to integrate django channels into my project. So, after successful login, when the token is received in the client side, I would like to initiate a websocket connection. Then on the server (consumer), I would like to check if the requested user is not anonymous. If the requested user is anonymous, I would like to close the connenction or else accept it.

This is how I have till now:

client side:

const socket = new WebSocket("ws://" + "dev.site.com"+ "/chat/");

routing.py:

channel_routing = [      route("websocket.connect", ws_connect),      ...      ...  ]

consumers:

def ws_connect(message):        # if the user is no anonymous      message.reply_channel.send({          "accept": True      })        # else      message.reply_channel.send({          "close": True      })

In the documentation there's a decorator @channel_session_user_from_http which will provide a message.user. But I am using a token instead of a session. How can I check a user on connection when using token authentication, so that I can accept or close connection. Or, if there is a better way could you please advise me with it. Thank you.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users...@googlegroups.com.
To post to this group, send email to django...@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CA%2B4-nGp5KhvYKdhD%3Dufus-jmHz%2BN%2BLPzOuX1R3V%2BPOYt8U4QXA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/2f013dc0-597b-43ad-acd1-b9643d6d167d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.