django-rest-framework/docs/api-guide/views.md

126 lines
4.5 KiB
Markdown
Raw Normal View History

2012-09-27 00:47:19 +04:00
<a class="github" href="decorators.py"></a> <a class="github" href="views.py"></a>
2012-09-09 01:06:13 +04:00
2012-10-02 14:04:06 +04:00
# Class Based Views
2012-09-09 01:13:11 +04:00
2012-09-01 23:26:27 +04:00
> Django's class based views are a welcome departure from the old-style views.
>
> &mdash; [Reinout van Rees][cite]
2012-09-27 00:47:19 +04:00
REST framework provides an `APIView` class, which subclasses Django's `View` class.
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
`APIView` classes are different from regular `View` classes in the following ways:
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
* Requests passed to the handler methods will be REST framework's `Request` instances, not Django's `HttpRequest` instances.
* Handler methods may return REST framework's `Response`, instead of Django's `HttpResponse`. The view will manage content negotiation and setting the correct renderer on the response.
* Any `APIException` exceptions will be caught and mediated into appropriate responses.
* Incoming requests will be authenticated and appropriate permission and/or throttle checks will be run before dispatching the request to the handler method.
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
Using the `APIView` class is pretty much the same as using a regular `View` class, as usual, the incoming request is dispatched to an appropriate handler method such as `.get()` or `.post()`. Additionally, a number of attributes may be set on the class that control various aspects of the API policy.
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
For example:
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
class ListUsers(APIView):
"""
View to list all users in the system.
* Requires token authentication.
* Only admin users are able to access this view.
"""
authentication_classes = (authentication.TokenAuthentication,)
permission_classes = (permissions.IsAdmin,)
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
def get(self, request, format=None):
"""
Return a list of all users.
"""
2012-10-17 18:41:57 +04:00
usernames = [user.username for user in User.objects.all()]
return Response(usernames)
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
## API policy attributes
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
The following attributes control the pluggable aspects of API views.
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
### .renderer_classes
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
### .parser_classes
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
### .authentication_classes
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
### .throttle_classes
2012-09-01 23:26:27 +04:00
2012-09-27 00:47:19 +04:00
### .permission_classes
### .content_negotiation_class
## API policy instantiation methods
The following methods are used by REST framework to instantiate the various pluggable API policies. You won't typically need to override these methods.
### .get_renderers(self)
### .get_parsers(self)
### .get_authenticators(self)
### .get_throttles(self)
### .get_permissions(self)
### .get_content_negotiator(self)
## API policy implementation methods
The following methods are called before dispatching to the handler method.
### .check_permissions(...)
### .check_throttles(...)
### .perform_content_negotiation(...)
## Dispatch methods
The following methods are called directly by the view's `.dispatch()` method.
These perform any actions that need to occur before or after calling the handler methods such as `.get()`, `.post()`, `put()` and `.delete()`.
2012-10-05 18:22:30 +04:00
### .initial(self, request, \*args, **kwargs)
2012-09-27 00:47:19 +04:00
Performs any actions that need to occur before the handler method gets called.
This method is used to enforce permissions and throttling, and perform content negotiation.
You won't typically need to override this method.
### .handle_exception(self, exc)
Any exception thrown by the handler method will be passed to this method, which either returns a `Response` instance, or re-raises the exception.
The default implementation handles any subclass of `rest_framework.exceptions.APIException`, as well as Django's `Http404` and `PermissionDenied` exceptions, and returns an appropriate error response.
If you need to customize the error responses your API returns you should subclass this method.
2012-10-05 18:22:30 +04:00
### .initialize_request(self, request, \*args, **kwargs)
2012-09-27 00:47:19 +04:00
Ensures that the request object that is passed to the handler method is an instance of `Request`, rather than the usual Django `HttpRequest`.
You won't typically need to override this method.
2012-10-05 18:22:30 +04:00
### .finalize_response(self, request, response, \*args, **kwargs)
2012-09-27 00:47:19 +04:00
Ensures that any `Response` object returned from the handler method will be rendered into the correct content type, as determined by the content negotation.
You won't typically need to override this method.
2012-09-01 23:26:27 +04:00
2012-10-02 14:48:25 +04:00
---
2012-10-02 14:04:06 +04:00
# Function Based Views
> Saying [that Class based views] is always the superior solution is a mistake.
>
> &mdash; [Nick Coghlan][cite2]
REST framework also gives you to work with regular function based views...
**[TODO]**
[cite]: http://reinout.vanrees.org/weblog/2011/08/24/class-based-views-usage.html
[cite2]: http://www.boredomandlaziness.org/2012/05/djangos-cbvs-are-not-mistake-but.html