在Django REST framework中,settings.py中默认配置了全局的拦截器,
MIDDLEWARE = [
'django.middleware.security.SecurityMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware',
'django.middleware.common.CommonMiddleware',
'django.middleware.csrf.CsrfViewMiddleware',
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
]
还可以设置默认的拦截器,比如在settings.py
中配置DEFAULT_AUTHENTICATION_CLASSES
、DEFAULT_PERMISSION_CLASSES
、DEFAULT_THROTTLE_CLASSES
等
REST_FRAMEWORK = {
# ...
'DEFAULT_AUTHENTICATION_CLASSES': [],
'DEFAULT_PERMISSION_CLASSES': [],
'DEFAULT_THROTTLE_CLASSES': [],
# ...
}
<