User Profile

In our project we will manage the user data in the following ways:

• Custom user model: In this model we will store ALL user data unrelated to authentication. It will be related to the User model using a OneToOneField. We will try to avoid updating the User model completely and if there are any fields required from that model we will simply add them to the new custom model.
• AllAuth: AllAuth is a popular third-party module that handles user authentication and password/email management. It provides simple URL mappings such as account_signup, account_login, account_logout, account_reset_password, and account_email that handle all necessary forms, views, and templates for these functions.
• User model: The User model is a default Django model that represents all users in the system. It comes with a set number of fields, including username, password, email, first_name, last_name, is_staff, is_active, date_joined, and last_login. However, no extra fields can be added or removed from this model.

When it comes to creating forms, views, and templates for user data, we will focus on the custom user model and disregard the default User model. By adding first_name, last_name, and any other desired fields to the custom model, you can provide a more streamlined and user-friendly experience. Meanwhile, AllAuth can handle all password and email management, with a simple link to reset the email as needed.

---

Create / Update CUSTOM USER MODEL

models.py

class Profile(models.Model):
    user = models.OneToOneField(User, null=True, on_delete=models.CASCADE)
    user_avatar = ResizedImageField("Avatar", null=True, blank=True, upload_to="images/", force_format='PNG')
    user_additional_email = models.EmailField("Additional email, unrelated to authentication settings", max_length=254, blank=True, null=True)
    user_website = models.URLField("Website", max_length=200, blank=True, null=True)

    def __str__(self):
        return str(self.user.username)

    def get_absolute_url(self):
        return reverse('profile')

forms.py

class FormProfile(forms.ModelForm):
class Meta:
    model = Profile
    fields = '__all__'
    exclude = ('user', )
    widgets = {
        'user_avatar':forms.FileInput(attrs={'class':'form-control'}),
        'user_additional_email':forms.EmailInput(attrs={'class':'form-control', 'placeholder':'Email'}),
        'user_website':forms.URLInput(attrs={'class':'form-control', 'placeholder':'Website'})
    }

views.py

@login_required
def user_profile_create_update(request):
    # Use Django get_or_create method to handle form submission depending whether the profile already exists or not
    user_profile, created = Profile.objects.get_or_create(user=request.user)

    if request.method == "POST":
        form = FormProfile(request.POST, request.FILES, instance=user_profile)
        if form.is_valid():
            user_profile = form.save(commit=False)
            user_profile.user = request.user
            user_profile.save()
            return redirect('profile')
    else:
        form = FormProfile(instance=user_profile)

    option = 'Update' if not created else 'Create'

    return render(request, 'app_fossils/user_profile_create_update.html', {'form': form, 'option': option,})

Templates crete a new user_profile_create_update.html file:

{% extends 'base.html' %}
{% block title %} Profile {{ option }} {% endblock %}
{% load static %}
{% block content %}

<form method="POST" enctype="multipart/form-data">
    {% csrf_token %}
    {{ form.as_p }}
    <button class="save btn btn-sm btn-outline-primary" type="submit">{{ option }}</button>
</form>

{% endblock %}

urls.py

path('profile_create_update', user_profile_create_update, name='profile-create_update'),

---

Allauth url mappings

• {% url 'account_signup' %}
• {% url 'account_login' %}
• {% url 'account_logout' %}
• {% url 'account_reset_password' %}
• {% url 'account_email' %}

Display email used with the AllAuth authentication: As the email can be different to the user email stored in the User model, you can use this code instead:

{{ user.emailaddress_set.first.email }}

---

Display User Profile

views.py

@login_required
def user_profile(request):
    return render(request, 'app_fossils/user_profile.html')

urls.py

path('profile', user_profile, name='profile'),

Template: create a new user_profile.html file:

{% extends 'base.html' %}
{% block title %} Profile {% endblock %}
{% load static %}
{% block content %}

<h2>USER MODEL</h2>
<h5>Fields: </h5>
<ul>
    <li>Username: {{ user.username }}</li>
    <li>Password: {{ user.password|slice:20 }} ...</li>
    <li>Email: {{ user.email }}</li>
    <li>First name: {{ user.first_name }}</li>
    <li>Last name: {{ user.last_name }}</li>
    <li>Is staff: {% if user.is_staff %} 🟢 {% else %} 🔴 {% endif %}</li>
    <li>Is active: {% if user.is_active %} 🟢 {% else %} 🔴 {% endif %}</li>
    <li>Date joined: {{ user.date_joined }}</li>
    <li>Last login: {{ user.last_login }}</li>
</ul>
    
<h5>Settings:</h5>
<a href="{% url 'account-update' %}">Update</a><br>
<small>We don't need password reset form as we use AllAuth in our project!</small>

<br><hr><br>

<h2>CUSTOM PROFILE MODEL</h2>
<h5>Fields: </h5>
<ul>
    <li>User: {{ user.profile.user }}</li>
    {% if user.profile.user_avatar %}<li>Avatar: <img src="{{ user.profile.user_avatar.url }}" alt="" style="max-width: 70px; max-height: 70px;"></li>{% endif %}
    <li>Additional email: {{ user.profile.user_additional_email }}</li>
    <li>Website: <a href="{{ user.profile.user_website.url }}">{{ user.profile.user_website }}</a></li>
</ul>

<h5>Settings:</h5>
<a href="{% url 'profile-create_update' %}">
    {% if user.profile %} Update {% else %} Create {% endif %} profile
</a><br>

<br><hr><br>
<h2>AllAuth settings</h2>
<ul>
    <li><a href="{% url 'account_signup' %}">Register</a></li>
    <li><a href="{% url 'account_login' %}">Login</a></li>
    <li><a href="{% url 'account_logout' %}">Logout</a></li>
    <li><a href="{% url 'account_reset_password' %}">Reset password</a></li>
    <li><a href="{% url 'account_email' %}">Update email</a></li>
</ul>


{% endblock %}

---

USER MODEL

The approach in this project is to include the relevant User Model fields in the Custom Profile Model, but in case it is required here is how to edit the User Model.

It is possible to use Django signals and create/update a custom user model every time the user model is updated, but for our project purposes the better solution will be to simply create a new custom model and disregard the user model completely.

forms.py Create a custom form to remove all the fields which are irrelevant to users:

self.fields.pop('password', None) removes the password prompt from the form

from django.contrib.auth.models import User
class FormAccount(UserChangeForm):
        
    def __init__(self, *args, **kwargs):
        super().__init__(*args, **kwargs)
        self.fields.pop('password', None)

    class Meta:
        model = User
        fields = ('first_name', 'last_name', 'email')
        exclude = ('password', 'password1', 'password2', 'password3')

views.py

@login_required
def user_account_update(request):
    if request.method == "POST":
        form = FormAccount(request.POST, instance=request.user)
        if form.is_valid():
            form.save()
            return redirect('profile')
    else:
        form = FormAccount(instance=request.user)

    return render(request, 'app_fossils/user_account_update.html', {'form': form,})

Tempaltes: create a new user_account_update.html file:

{% extends 'base.html' %}
    {% block title %} Update account settings {% endblock %}
    {% load static %}
    {% block content %}
    
    <form method="POST" enctype="multipart/form-data">
        {% csrf_token %}
        {{ form.as_p }}
        <button class="save btn btn-sm btn-outline-primary" type="submit">Update</button>
    </form>
    
    {% endblock %}

urls.py

path('account_update', user_account_update, name='account-update'),