django用户认证的session的应用

from django.shortcuts import render,redirect

def login(request):
    if request.method=='GET':
        return render(request,'login.html')
    elif request.method=="POST":
        user=request.POST.get('username')
        pwd=request.POST.get('password')
        if user=="root" and pwd=="":
            if request.POST.get('box')=="":   #checkbox被按下
                request.session.set_expiry(3600)  #session认证时间为3600s，3600s之后session认证失效
            request.session['username']=user   #user的值发送给session里的username
            request.session['is_userlogin']=True   #认证为真
            return redirect('/index')
        else:
            return redirect('/login')
    return render(request,'login.html')

def index(request):
    if request.session.get('is_userlogin',False):  #若session认证为真

        return render(request,'index.html',{'username':request.session['username']})
    else:
        return redirect('/login')

def logout(request): #撤销 request.session.clear() #删除session里的全部内容 return redirect('/login')