django - 在 Django 1.5 中使用密码确认操作

Question

如何在 Django 1.5 中创建“使用密码确认”表单？我将创建一个禁用用户帐户的功能，但如果用户无法提供正确的密码，则不应禁用该帐户。我尝试过使用 FormView 和form_class=AuthenticationForm，但它同时显示了用户名和密码，我只需要密码，因为用户已经登录。

Answer 1

编写密码验证表单：

表格.py

from django import forms
from django.contrib.auth.models import check_password

class ValidatePasswordForm(forms.Form):
    password = forms.CharField(label="Your Password",
        widget=forms.PasswordInput)

    def __init__(self, *args, **kwargs):
        self.user = kwargs.pop('user')
        super(ValidatePasswordForm, self).__init__(*args, **kwargs)

    def clean_password(self):
        password = self.cleaned_data['password']
        valid = check_password(password, self.user.password)
        if not valid:
            raise forms.ValidationError('Invalid password')
        return password

视图.py

from django.shortcuts import render_to_response
from django.template import RequestContext

from myapp.forms import ValidatePasswordForm

@login_required
def validate_password(request):
    form = ValidatePasswordForm(request.POST or None, user=request.user)
    if request.method == 'POST':
        if form.is_valid():
            # do something upon validation
            # disable account
            pass
    request_dict = {'form': form}
    return render_to_response('my_template.html',
        request_dict, context_instance=RequestContext(request))