Why is authenticate in drf not working and how do I make it work?
I am using Django with rest framework. Sign Up works fine, but when I log in, after passing the email and password to the backend, the authenticate()
returns None even if the credentials are right. I am using a custom user model. Here are the relevant lines of code:
models.py (does not include all fields)
class CustomUserManager(BaseUserManager):
def create_user(self, email, password, **kwargs):
if not email:
raise ValueError('The user must enter a valid email.')
email = self.normalize_email(email)
user = self.model(email=email, **kwargs)
user.set_password(password)
user.save()
return user
def create_superuser(self, email, password, **kwargs):
kwargs.setdefault('is_staff', True)
kwargs.setdefault('is_superuser', True)
kwargs.setdefault('is_active', True)
if kwargs.get('is_staff') is not True:
raise ValueError('Superuser must have is_staff=True.')
if kwargs.get('is_superuser') is not True:
raise ValueError('Superuser must have is_superuser=True.')
return self.create_user(email, password, **kwargs)
class CustomUser(AbstractBaseUser, PermissionsMixin):
user_id = models.AutoField(primary_key=True)
first_name = models.CharField(max_length=255, blank=True)
middle_name = models.CharField(max_length=255, blank=True)
last_name = models.CharField(max_length=255, blank=True)
email = models.EmailField(unique=True)
is_active = models.BooleanField(default=True)
is_staff = models.BooleanField(default=False)
is_superuser = models.BooleanField(default=False)
objects = CustomUserManager()
USERNAME_FIELD = 'email'
REQUIRED_FIELDS = ['first_name', 'last_name']
groups = models.ManyToManyField(
"auth.Group",
related_name="customuser_set",
blank=True
)
user_permissions = models.ManyToManyField(
"auth.Permission",
related_name="customuser_set",
blank=True
)
viewsets.py
@action(detail=False, methods=["post"], permission_classes=[AllowAny])
def login(self, request):
email = request.data.get("email")
password = request.data.get("password")
user = CustomUser.objects.get(email=email)
print(user)
user = authenticate(request, email=email, password=password) # this returns None all the time
if user:
login(request, user)
return Response({"message": "Login successful!"})
return Response({"error": "Invalid credentials"}, status=401)
settings.py
AUTHENTICATION_BACKENDS = [
'django.contrib.auth.backends.ModelBackend',
]
I am not sure where the issue lies. Doing user = CustomUser.objects.get(email=email)
also does not get me the CustomUser
instance.