rest_framework流程图

GenericViewSet

class GenericAPIView(views.APIView):

mixins.ListModelMixin

class APIView(View):

然后再返回到我们的dispatch里面去执行接下来的代码

再回到我们的dispatch里面的initialize_request的返回值Request里面的get_authenticators

mixins.CreateModelMixin

这是我们举例的自定义认证类:class BookViewSet(ModelViewSet): authentication_classes = [MyAuthentication] permission_classes = [VIPPermission] # throttle_classes = [] # 这里是频率验证 queryset = Book.objects.all() serializer_class = BookSerializers

mixins.UpdateModelMixin

这是列表解析式的配置项class APIView(View):permission_classes = api_settings.DEFAULT_PERMISSION_CLASSES

mixins.RetrieveModelMixin

self.perform_authentication(request)它里面的代码就只有一句话:request.user 这里是调用一个类的静态方法

mixins.DestroyModelMixin

ModelViewSet

这里开始执行check_permissions方法

返回到initial里面去

class View(object):

这里是从for循环里面的self.get _permissions得来的函数代码块:def get_permissions(self): \"\"\" Instantiates and returns the list of permissions that this view requires. \"\"\" return [permission() for permission in self.permission_classes]返回值是一个列表解析式