Django & Django Rest Framework. Пользовательское приложение для счетов

Мне нужна помощь в создании пользовательского приложения учетных записей вместо использования django_allauth или встроенной модели пользователя django. Я застрял на LoginView, LogoutView, SignupView, и связывании созданной модели с auth моделью django rest framework (использование созданной модели для аутентификации вашего api с помощью токена). Вот что я написал:

models.py:

from django.db import models


class Account(models.Model):
    email = models.EmailField(unique=True, blank=True, null=True)
    phone = models.CharField(max_length=30, unique=True, blank=True, null=True)
    password = models.CharField(max_length=250)
    created_at = models.DateTimeField(auto_now_add=True)
    updated_at = models.DateTimeField(auto_now=True)

urls.py:

from django.urls import path
from accounts.views import (
    AccountsView, 
    AccountView,
    SignupView,
    LoginView,
    LogoutView
)


app_name = 'accounts'

urlpatterns = [
    path('', AccountsView.as_view()),
    path('<int:pk>', AccountView.as_view()),
    path('signup/', SignupView.as_view()),
    path('login/', LoginView.as_view()),
    path('logout/', LogoutView.as_view())
]

serializers.py:

from django.contrib.auth.hashers import make_password
from rest_framework import serializers
from accounts.models import Account


class AccountSerializer(serializers.Serializer):
    id = serializers.IntegerField(read_only=True)
    email = serializers.EmailField()
    phone = serializers.CharField(max_length=30)
    password = serializers.CharField(max_length=250, write_only=True, required=True)
    created_at = serializers.DateTimeField(read_only=True)
    updated_at = serializers.DateTimeField(read_only=True)

    def create(self, validated_data):
        password = make_password(validated_data.get('password'))
        account = Account.objects.create(
            email=validated_data.get('email'),
            phone=validated_data.get('phone'),
            password=password
        )
        return account

    def update(self, account, validated_data):
        password = make_password(validated_data.get('password')) if validated_data.get('password') is not None else account.password
        account.email = validated_data.get('email', account.email)
        account.phone = validated_data.get('phone', account.phone)
        account.password = password
        account.save()
        return account

views.py:

from django.http import Http404
from rest_framework import status
from rest_framework.views import APIView
from rest_framework.authentication import TokenAuthentication
from rest_framework.permissions import IsAuthenticated
from rest_framework.response import Response
from accounts.models import Account
from accounts.serializers import AccountSerializer


class AccountsView(APIView):
    authentication_classes = [TokenAuthentication]
    permission_classes = [IsAuthenticated]  

    def get(self, request): 
        queryset = Account.objects.all()
        serializer = AccountSerializer(queryset, many=True)
        return Response(serializer.data, status=status.HTTP_200_OK)

    def post(self, request):
        serializer = AccountSerializer(data=request.data)
        if serializer.is_valid():
            serializer.save()
            return Response(serializer.data, status=status.HTTP_201_CREATED)
        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)


class AccountView(APIView):
    authentication_classes = [TokenAuthentication]
    permission_classes = [IsAuthenticated]  

    def get(self, request, pk):
        try:
            account = Account.objects.get(pk=pk)
        except Account.DoesNotExist:
            raise Http404
        serializer = AccountSerializer(account)
        return Response(serializer.data, status=status.HTTP_200_OK)
    
    def put(self, request, pk):
        try:
            account = Account.objects.get(pk=pk)
        except Account.DoesNotExist:
            raise Http404
        serializer = AccountSerializer(account, data=request.data)
        if serializer.is_valid():
            serializer.save()
            return Response(serializer.data, status=status.HTTP_200_OK)
        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)

    def delete(self, request, pk):
        try:
            account = Account.objects.get(pk=pk)
        except Account.DoesNotExist:
            raise Http404
        account.delete()
        return Response(status=status.HTTP_204_NO_CONTENT)


class SignupView(APIView):
    def post(self, request):
        pass


class LoginView(APIView):
    def post(self, request):
        pass


class LogoutView(APIView):
    def post(self, request):
        pass

Вернуться на верх