Gain insights into creating custom users, using Simple JWT for authentication, sending verification emails, managing tokens, resetting passwords, and testing endpoints in Django RESTful projects.

“Django-Restful Custom User Authentication Using Simple JWT”.png

Django_PostmanClip.tar.gz

initial-setup

installations

custom-model

reg-serializer

reg-view

reg-endpoint-one

reg-endpoint-two

reg-endpoint-three

email-verification-one

email-verification-two

resend-email-verification-one

resend-email-verification-two

login-serializer

login-view

login-view-one

login-endpoint-one

login-endpoint-two

password-reset-serializer

password-reset-email

password-reset-view

password-reset-endpoint-one

password-reset-endpoint-two

user-listing-and-retrieval-one

user-listing-and-retrieval-two

user-logout-and-token-blacklisting-one

user-logout-and-token-blacklisting-two

endpoint-listing-one

endpoint-listing-two

Postman-1

Django-Postman V 1.0-copy

In this course, you will learn to use a package called Simple JWT to help implement JWT authentication in your Django RESTful projects.

In the beginning, you will learn how to create custom users in Django using Django RESTful. Next, you will learn to register users using JWT and send them account verification emails. After that, you will learn how to make custom token claims when logging in users, and also how to refresh the tokens after expiry. You will then learn how to reset passwords and understand how password reset emails work. You will learn to organize your users in Django RESTful, log them out, and also black-list their JWT tokens. You will finish by learning how to manage and test your endpoints by documenting and testing them.

After the completion of this course, you will be able to create custom users in Django RESTful framework, authenticate them using Simple JWT, programmatically send account verification and password reset emails.

Custom User Authentication with Simple JWT in Django RESTful




This lesson focuses on implementing the password reset email.

# Create a view for requesting a password reset email
In this lesson, we'll build a view to be called when a user requests a password reset email. Our view's primary task is sending the user an email containing a password reset link.
We can create the view class in our `views.py` file like this.

# ... other imports

# ... updated serializers import with RequestPasswordResetEmailSerializer
from .serializers import RegistrationSerializer, EmailVerificationSerializer, ResendVerificationEmailSerializer, LoginSerializer, RequestPasswordResetEmailSerializer #Updated

# new imports
from django.contrib.auth.tokens import PasswordResetTokenGenerator
from django.utils.encoding import smart_bytes
from django.utils.http import urlsafe_base64_encode


# .... other views
class RequestPasswordResetEmailView(generics.GenericAPIView):
    serializer_class = RequestPasswordResetEmailSerializer

    def post(self, request):
        serializer = self.serializer_class(data=request.data)
        serializer.is_valid(raise_exception=True)
        
        Email = request.data['email']
        
        if User.objects.filter(email=Email).exists():
            user = User.objects.get(email=Email)
            uidb64 = urlsafe_base64_encode(smart_bytes(user.id))
            token = PasswordResetTokenGenerator().make_token(user)

            current_site = get_current_site(request=request).domain
            relativeLink = reverse('password-reset-confirm', kwargs={'uidb64': uidb64, 'token': token})
            absurl = 'https://' + current_site + relativeLink 
            
            email_body = "Hello! \n Use the link below to reset your password \n" + absurl
            data = {'email_body': email_body,'to_email': user.email,
                    'email_subject':'Reset your password'}
            
            Mail.send_email(data)
            
        return Response({'Success': 'Password reset email sent'}, status=status.HTTP_200_OK)

In the code above, we start by declaring a serializer class in our `RequestPasswordResetEmailView` class in **line 13**, and then we create a `post()` method in **line 16**.
In the `post()` method:
- We pass the request's data to the serializer class and store the serialized data in the `serializer` variable.
- In **line 18**, we confirm that the serializer data is valid, and if it is not, an exception is raised.
- The `Email` variable stores the entered user email address.
- In the `if` condition in **line 22**, we ensure that the email address entered is linked to an account in our database. If the email address exists, we get the user object with that email address and store it in the variable `user`.
- The `uidb64` in **line 24** stores a base64-encoded user ID that is also URL safe.
- The `token` variable in **line 25** holds a user-tailored token used to prove that the password reset is authorized. It can only be used once and expires after three days by default. This token is safe from brute-force attacks because Django does not store a copy in the database. Instead, it uses encoding algorithms to verify it.
- The `current_site` variable in **line 27** stores the domain of our site.
- The `relativeLink` variable in **line 28** stores the password reset endpoint and take the `uidb64` and token as arguments.
- The `absurl` in **line 29** is the combination of our site domain, and password reset endpoint to create a password reset link for our site.
  > **Note:** We may use `HTTPS` or `HTTP` for the `absurl`, depending upon the security level of localhost.
- The `email_body` on **line 31** stores the message in our password reset email, i.e., "Greetings," the password reset link, and instructions.
- The `data` on **line 32** is a dictionary that stores the email body, recipient, and subject of the email.
- The function call `Mail.send_email(data)` in **line 35** sends the email.
- After sending the email, we return a response telling the user they have been sent the reset email. 

# Try it
Let's try practicing what we have learned in `views.py` file in the playground below:
1. Make the necessary imports
2.  Create the `RequestPasswordResetEmailView` class

Learn how to send a password reset link via email.

Password Reset Email

About This Course

Registering Custom User Using Simple JWT

Logging in User Using Simple JWT

Resetting User Password

Organizing Users

User Logout

Managing and Testing the Endpoints

Conclusion

Appendix

Password Reset Email

Create a view for requesting a password reset email