django-allauthのデフォルト機能だけで高度な認証機能を実装する方法

pip install django-allauth

INSTALLED_APPS = [
    # allauth
    "django.contrib.sites",
    "allauth",
    "allauth.account",
    "allauth.socialaccount",
]

AUTHENTICATION_BACKENDS = [
    "django.contrib.auth.backends.ModelBackend",
    "allauth.account.auth_backends.AuthenticationBackend",
]

SITE_ID = 1

# ユーザー認証にメールアドレスを使用
ACCOUNT_AUTHENTICATION_METHOD = "email"
# ユーザー登録にメールアドレスを必須にする
ACCOUNT_EMAIL_REQUIRED = True
# ユーザー名の登録を不要にする
ACCOUNT_USERNAME_REQUIRED = False
# 登録後、メールアドレスに確認メールが送信される
ACCOUNT_EMAIL_VERIFICATION = "mandatory"
# 連続してログイン失敗できる回数を5回に制限
ACCOUNT_LOGIN_ATTEMPTS_LIMIT = 5
# ログインがロックされた後に再試行できるまでの時間
ACCOUNT_LOGIN_ATTEMPTS_TIMEOUT = 300

urlpatterns = [
    # 追加
    path("accounts/", include("allauth.urls")),
]

EMAIL_BACKEND = "django.core.mail.backends.smtp.EmailBackend"
EMAIL_HOST = "smtp.gmail.com"
EMAIL_PORT = 587
EMAIL_USE_TLS = True
EMAIL_HOST_USER = "your-email@gmail.com"
EMAIL_HOST_PASSWORD = "your-password"

EMAIL_BACKEND = "django.core.mail.backends.console.EmailBackend"

.
└── templates/
    ├── account/
    │   ├── login.html
    │   ├── signup.html
    │   └── email/
    │       ├── email_confirmation_subject.txt
    │       └── email_confirmation_message.txt
    └── socialaccount/
        └── connections.html

{% extends "account/base.html" %}
{% load i18n %}
{% load account socialaccount %}

{% block head_title %}{% trans "ログイン" %}{% endblock %}

{% block content %}
<h1>{% trans "ログイン" %}</h1>

<form class="login" method="POST" action="{% url 'account_login' %}">
  {% csrf_token %}
  {{ form.as_p }}
  {% if redirect_field_value %}
  <input type="hidden" name="{{ redirect_field_name }}" value="{{ redirect_field_value }}" />
  {% endif %}
  <button type="submit">{% trans "ログイン" %}</button>
  <a href="{% url 'account_reset_password' %}">{% trans "パスワードを忘れましたか？" %}</a>
</form>

{% endblock %}

from allauth.account.adapter import DefaultAccountAdapter
from django.contrib import messages
from django.core.exceptions import ValidationError
from django.urls import reverse_lazy


class CustomAccountAdapter(DefaultAccountAdapter):

    def is_open_for_signup(self, request):
        # サインアップを許可するかどうかを制御
        return True

    def save_user(self, request, user, form, commit=True):
        # ユーザー情報の保存方法をカスタマイズ
        user = super().save_user(request, user, form, commit=False)
        user.age = form.cleaned_data.get("age")
        user.weight = form.cleaned_data.get("weight")
        if commit:
            user.save()
        return user

    def clean_email(self, email):
        # メールアドレスのバリデーションをカスタマイズ
        if "example.com" not in email:
            raise ValidationError("Only example.com emails are allowed.")
        return email

    def get_login_redirect_url(self, request):
        # ログイン後のリダイレクトURLを指定
        path = reverse_lazy("profile-update", kwargs={"pk": request.user.pk})
        return path

    def get_logout_redirect_url(self, request):
        # ログアウト後のリダイレクトURLを指定
        return reverse_lazy("home")

    def confirm_email(self, request, email_address):
        # メール確認プロセスのカスタマイズ
        email_address.verified = True
        email_address.save()

    def add_message(self, request, level, message_template=None, message_context=None, extra_tags="", message=None):
        # カスタムメッセージの追加
        if not message:
            message = "Default custom message."
        messages.add_message(request, level, message)

ACCOUNT_ADAPTER = "your_project.adapter.CustomAccountAdapter"

def is_open_for_signup(self, request):
    return True

def is_open_for_signup(self, request):
    return request.user.is_staff or datetime.now().weekday() < 5

def save_user(self, request, user, form, commit=True):
    user = super().save_user(request, user, form, commit=False)
    user.age = form.cleaned_data.get("age")
    user.weight = form.cleaned_data.get("weight")
    if commit:
        user.save()
    return user

from allauth.account import views as allauth_views
from django.contrib import admin
from django.urls import include, path

from . import views

# アカウント関連のURLパターン
account_patterns = [
    path("login/", views.CustomLoginView.as_view(), name="account_login"),
    path("signup/", views.CustomSignupView.as_view(), name="account_signup"),
    path("logout/", views.CustomLogoutView.as_view(), name="account_logout"),
    path("confirm-email/<str:key>/", views.CustomConfirmEmailView.as_view(), name="account_confirm_email"),
    path("password/reset/", views.CustomPasswordResetView.as_view(), name="account_reset_password"),
    path("password/change/", views.CustomPasswordChangeView.as_view(), name="account_change_password"),
]

urlpatterns = [
    path("", views.home, name="home"),
    path("admin/", admin.site.urls),
    path("accounts/", include((account_patterns, "account"))),
    path("blog/", include("apps.blog.urls", namespace="blog")),
]

from django.urls import reverse

login_url = reverse("account:account_login")
signup_url = reverse("account:account_signup")

<a href="{% url 'home' %}">ホーム</a>
<a href="{% url 'account:account_login' %}">ログイン</a>
<a href="{% url 'account:account_signup' %}">サインアップ</a>

urlpatterns = [
    path("accounts/", include("allauth.urls")),
    path("accounts/login/", CustomLoginView.as_view(), name="account_login"),
]

# アカウント関連のURLパターン
account_patterns = [
    path("login/", CustomLoginView.as_view(), name="account_login"),
    path("signup/", CustomSignupView.as_view(), name="account_signup"),
    path("logout/", CustomLogoutView.as_view(), name="account_logout"),
]

urlpatterns = [
    path("", views.home, name="home"),
    path("admin/", admin.site.urls),
    path("accounts/", include("allauth.urls")),
    path("accounts/", include(account_patterns)),
    path("blog/", include("apps.blog.urls", namespace="blog")),
]