احرازهویت با جنگو همه‌چیز درباره‌ی احراز هویت با کوکی و JWT

from django.urls import path
from rest_framework_simplejwt.views import TokenObtainPairView, TokenRefreshView

urlpatterns = [
	path('api/token/', TokenObtainPairView.as_view(), name='token_obtain_pair'),  # دریافت Access Token و Refresh Token
	path('api/token/refresh/', TokenRefreshView.as_view(), name='token_refresh'),  # دریافت Access Token جدید
]

from rest_framework.views import APIView
from rest_framework.response import Response
from rest_framework_simplejwt.tokens import RefreshToken
from django.contrib.auth.models import User

class RegisterView(APIView):
	def post(self, request):
		username = request.data.get("username")
		password = request.data.get("password")

		if User.objects.filter(username=username).exists():
			return Response({"error": "نام کاربری قبلاً ثبت شده است"}, status=400)

		user = User.objects.create_user(username=username, password=password)
		refresh = RefreshToken.for_user(user)

		return Response({
			"access_token": str(refresh.access_token),
			"refresh_token": str(refresh)
		})

from rest_framework.views import APIView
from rest_framework.response import Response
from rest_framework.permissions import IsAuthenticated

class DashboardView(APIView):
	#داشبورد فقط برای کاربران لاگین‌شده
	permission_classes = [IsAuthenticated]

	if user.is_staff:
		role = "ادمین"
	else:
		role = "کاربر معمولی"

	def get(self, request):
		user = request.user
		dashboard_data = {
			"username": user.username,
			"email": user.email,
			"joined_at": user.date_joined.strftime('%Y-%m-%d'),
			"role": role,
		}
		return Response(dashboard_data)

async function getTokens(username, password) {
	const response = await fetch("http://127.0.0.1:8000/api/token/", {
		method: "POST",
		headers: { "Content-Type": "application/json" },
		body: JSON.stringify({ username, password })
	});

	const data = await response.json();
	if (response.ok) {
		console.log("Access Token:", data.access); // توکن رو ذخیره کن
		console.log("Refresh Token:", data.refresh); // توکن رو ذخیره کن
	} else {
		console.error("Error:", data.error);
	}
}

async function refreshAccessToken(refreshToken) {
		const response = await fetch("http://127.0.0.1:8000/api/token/refresh/", {
			method: "POST",
			headers: { "Content-Type": "application/json" },
			body: JSON.stringify({ refresh: refreshToken })
		});

	const data = await response.json();
		if (response.ok) {
			console.log("New Access Token:", data.access);
			return data.access;
		} else {
			console.error("Error:", data.error);
		}
}

async function fetchDashboard(accessToken) {
		const response = await fetch("http://127.0.0.1:8000/api/dashboard/", {
			method: "GET",
			headers: { "Authorization": `Bearer ${accessToken}` }
		});

	const data = await response.json();
		if (response.ok) {
			console.log("Dashboard Data:", data);
			return data;
		} else {
			console.error("Unauthorized:", data.error);
		}
}