From 7cb93fff80c9cb07824f580d3ccdfb73e72d57c8 Mon Sep 17 00:00:00 2001
From: xiaji <rembme@163.com>
Date: Wed, 28 Jan 2026 18:45:01 +0800
Subject: [PATCH] =?UTF-8?q?feat(=E8=AE=A4=E8=AF=81):=20=E6=B7=BB=E5=8A=A0?=
 =?UTF-8?q?=E7=94=A8=E6=88=B7=E7=99=BB=E5=BD=95=E5=92=8C=E6=B3=A8=E9=94=80?=
 =?UTF-8?q?=E5=8A=9F=E8=83=BD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

添加用户认证功能，包括登录页面、视图逻辑和模板
配置登录URL设置并保护首页视图需要认证
在导航栏添加登录状态显示和操作按钮
---
 .../0007_alter_insightrecord_speaker.py       | 19 +++++++++
 core/templates/core/base.html                 | 12 ++++++
 core/templates/core/login.html                | 27 +++++++++++++
 core/urls.py                                  |  4 ++
 core/views.py                                 | 40 +++++++++++++++++++
 diary_family/settings.py                      |  3 ++
 6 files changed, 105 insertions(+)
 create mode 100644 core/migrations/0007_alter_insightrecord_speaker.py
 create mode 100644 core/templates/core/login.html

diff --git a/core/migrations/0007_alter_insightrecord_speaker.py b/core/migrations/0007_alter_insightrecord_speaker.py
new file mode 100644
index 0000000..541d920
--- /dev/null
+++ b/core/migrations/0007_alter_insightrecord_speaker.py
@@ -0,0 +1,19 @@
+# Generated by Django 5.1.4 on 2026-01-28 10:34
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('core', '0006_add_summary'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='insightrecord',
+            name='speaker',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='core.familymember', verbose_name='发言人'),
+        ),
+    ]
diff --git a/core/templates/core/base.html b/core/templates/core/base.html
index d29981a..d09f994 100644
--- a/core/templates/core/base.html
+++ b/core/templates/core/base.html
@@ -66,6 +66,18 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav">
+                    {% if user.is_authenticated %}
+                    <li class="nav-item">
+                        <span class="nav-link">欢迎，{{ user.username }}</span>
+                    </li>
+                    <li class="nav-item">
+                        <a class="nav-link" href="{% url 'logout' %}">注销</a>
+                    </li>
+                    {% else %}
+                    <li class="nav-item">
+                        <a class="nav-link" href="{% url 'login' %}">登录</a>
+                    </li>
+                    {% endif %}
                     <li class="nav-item">
                         <a class="nav-link" href="/houtai/">后台管理</a>
                     </li>
diff --git a/core/templates/core/login.html b/core/templates/core/login.html
new file mode 100644
index 0000000..05cd19f
--- /dev/null
+++ b/core/templates/core/login.html
@@ -0,0 +1,27 @@
+{% extends 'core/base.html' %}
+
+{% block content %}
+<div class="row justify-content-center">
+    <div class="col-md-6">
+        <div class="card">
+            <div class="card-header bg-primary text-white">
+                <h5 class="card-title mb-0 text-center">用户登录</h5>
+            </div>
+            <div class="card-body">
+                <form method="POST">
+                    {% csrf_token %}
+                    <div class="mb-3">
+                        <label for="username" class="form-label">用户名</label>
+                        <input type="text" class="form-control" id="username" name="username" required>
+                    </div>
+                    <div class="mb-3">
+                        <label for="password" class="form-label">密码</label>
+                        <input type="password" class="form-control" id="password" name="password" required>
+                    </div>
+                    <button type="submit" class="btn btn-primary w-100">登录</button>
+                </form>
+            </div>
+        </div>
+    </div>
+</div>
+{% endblock %}
\ No newline at end of file
diff --git a/core/urls.py b/core/urls.py
index 0a97875..9a48529 100644
--- a/core/urls.py
+++ b/core/urls.py
@@ -2,6 +2,10 @@ from django.urls import path
 from . import views
 
 urlpatterns = [
+    # 登录和注销
+    path('login/', views.user_login, name='login'),
+    path('logout/', views.user_logout, name='logout'),
+    
     # 首页
     path('', views.index, name='index'),
     
diff --git a/core/views.py b/core/views.py
index 1a489ec..26c703e 100644
--- a/core/views.py
+++ b/core/views.py
@@ -5,6 +5,9 @@ from django.db.models import Count
 from django.core.mail import send_mail, EmailMessage
 from django.conf import settings
 from django.views.decorators.csrf import csrf_exempt
+from django.contrib.auth import authenticate, login, logout
+from django.contrib.auth.decorators import login_required
+from django.contrib import messages
 from datetime import timedelta, datetime
 import os
 from loguru import logger
@@ -55,6 +58,7 @@ from .forms import (
 )
 
 # 首页视图
+@login_required
 def index(request):
     """首页"""
     logger.info("用户访问首页")
@@ -864,3 +868,39 @@ def api_submit_summary(request):
     except Exception as e:
         logger.error(f"API: 提交汇总记录失败: {str(e)}")
         return JsonResponse({'success': False, 'message': f"提交失败: {str(e)}"}, status=500)
+
+# 登录视图
+def user_login(request):
+    """用户登录"""
+    if request.user.is_authenticated:
+        logger.info(f"用户 {request.user.username} 已登录，重定向到首页")
+        return redirect('index')
+    
+    if request.method == 'POST':
+        username = request.POST.get('username')
+        password = request.POST.get('password')
+        
+        logger.info(f"用户登录尝试: {username}")
+        
+        user = authenticate(request, username=username, password=password)
+        
+        if user is not None:
+            login(request, user)
+            logger.info(f"用户 {username} 登录成功")
+            messages.success(request, '登录成功！')
+            return redirect('index')
+        else:
+            logger.warning(f"用户 {username} 登录失败: 用户名或密码错误")
+            messages.error(request, '用户名或密码错误，请重新尝试。')
+    
+    return render(request, 'core/login.html')
+
+# 注销视图
+def user_logout(request):
+    """用户注销"""
+    if request.user.is_authenticated:
+        logger.info(f"用户 {request.user.username} 注销")
+        logout(request)
+        messages.success(request, '已成功注销！')
+    
+    return redirect('login')
diff --git a/diary_family/settings.py b/diary_family/settings.py
index cf814ef..20bdd46 100644
--- a/diary_family/settings.py
+++ b/diary_family/settings.py
@@ -124,6 +124,9 @@ STATIC_URL = 'static/'
 
 DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 
+# Login URL configuration
+LOGIN_URL = '/login/'
+
 # Media files configuration
 MEDIA_URL = '/media/'
 MEDIA_ROOT = BASE_DIR / 'media'