৭. django-allauth Google Login (DRF)

django-admin startproject myproject
cd myproject

pip install django djangorestframework django-allauth  dj-rest-auth djangorestframework-simplejwt

INSTALLED_APPS = [
    # Django অ্যাপগুলো
    'django.contrib.sites',
    # Third-party অ্যাপগুলো
    'rest_framework',
    'rest_framework.authtoken',  # <-- Add this line

    'allauth',
    'allauth.account',
    'allauth.socialaccount',
    'allauth.socialaccount.providers.google',  # Google login
    'dj_rest_auth',  # dj-rest-auth অ্যাপ
    'dj_rest_auth.registration',  # Social login registration
    'rest_framework_simplejwt',  # Simple JWT অ্যাপ
]
# Use a dummy email backend for development
EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'
MIDDLEWARE = [
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'allauth.account.middleware.AccountMiddleware',  # allauth middleware
]

# Authentication backends
AUTHENTICATION_BACKENDS = [
    'django.contrib.auth.backends.ModelBackend',
    'allauth.account.auth_backends.AuthenticationBackend',
]

SITE_ID = 1

REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': [
        'rest_framework.authentication.SessionAuthentication',
        'rest_framework_simplejwt.authentication.JWTAuthentication',

    ],
    'DEFAULT_PERMISSION_CLASSES': [
        'rest_framework.permissions.IsAuthenticated',
    ],
}

REST_USE_JWT = True

SOCIALACCOUNT_PROVIDERS = {
    'google': {
        'SCOPE': [
            'profile',
            'email',
        ],
        'AUTH_PARAMS': {
            'access_type': 'online',
        }
    }
}

# myproject/urls.py
from django.contrib import admin
from django.urls import path, include
from allauth.socialaccount.providers.google.views import GoogleOAuth2Adapter
from dj_rest_auth.registration.views import SocialLoginView
from rest_framework_simplejwt.views import TokenObtainPairView, TokenRefreshView

class GoogleLogin(SocialLoginView):
    adapter_class = GoogleOAuth2Adapter

urlpatterns = [
    path('admin/', admin.site.urls),
    path('accounts/', include('allauth.urls')),  # allauth URL
    path('api/auth/', include('dj_rest_auth.urls')),  # dj-rest-auth URL
    path('api/auth/registration/', include('dj_rest_auth.registration.urls')),  # registration URL
    path('api/auth/google/', GoogleLogin.as_view(), name='google_login'),  # Google login API endpoint
    path('api/token/', TokenObtainPairView.as_view(), name='token_obtain_pair'),  # JWT টোকেন অবটেইন
    path('api/token/refresh/', TokenRefreshView.as_view(), name='token_refresh'),  # JWT টোকেন রিফ্রেশ
]

python manage.py migrate

python manage.py createsuperuser

http://localhost:8000/accounts/google/login/callback/

656075529100-mhre4t4qn5rf6geel6lrb3b952b7h09v.apps.googleusercontent.com

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

from django.contrib import admin
from django.urls import path, include
from rest_framework_simplejwt.views import TokenObtainPairView, TokenRefreshView
from .views import google_login_redirect, google_login_callback

urlpatterns = [
    path('admin/', admin.site.urls),
    path('accounts/', include('allauth.urls')),
    path('api/auth/', include('dj_rest_auth.urls')),  # dj-rest-auth URLs
    path('api/auth/registration/', include('dj_rest_auth.registration.urls')),  # Registration URLs
    path('api/auth/google/', google_login_redirect, name='google_login_redirect'),  # Google login redirect URL
    path('api/auth/google/callback/', google_login_callback, name='google_login_callback'),  # Callback for Google login
    path('api/token/', TokenObtainPairView.as_view(), name='token_obtain_pair'),  # JWT Token Obtain endpoint
    path('api/token/refresh/', TokenRefreshView.as_view(), name='token_refresh'),  # JWT Token Refresh endpoint
]

from django.shortcuts import redirect
from django.http import JsonResponse
from allauth.socialaccount.models import SocialApp
from allauth.socialaccount.providers.google.provider import GoogleProvider
import requests
from rest_framework_simplejwt.tokens import RefreshToken
from django.contrib.auth.models import User

# Custom Redirect View for Google login
def google_login_redirect(request):
    app = SocialApp.objects.get(provider=GoogleProvider.id)
    client_id = app.client_id
    redirect_uri = "http://localhost:8000/api/auth/google/callback/"
    scope = " ".join(["email", "profile"])
    auth_url = (
        f"https://accounts.google.com/o/oauth2/auth?client_id={client_id}"
        f"&redirect_uri={redirect_uri}&scope={scope}&response_type=code"
    )
    return redirect(auth_url)

# Callback View for Google login
def google_login_callback(request):
    authorization_code = request.GET.get('code')
    
    if not authorization_code:
        return JsonResponse({"error": "Authorization code not found"}, status=400)
    
    app = SocialApp.objects.get(provider=GoogleProvider.id)
    client_id = app.client_id
    client_secret = app.secret
    redirect_uri = "http://localhost:8000/api/auth/google/callback/"
    
    # Google token endpoint
    token_url = "https://oauth2.googleapis.com/token"
    
    # Prepare the data to request the access token
    token_data = {
        'code': authorization_code,
        'client_id': client_id,
        'client_secret': client_secret,
        'redirect_uri': redirect_uri,
        'grant_type': 'authorization_code'
    }
    
    # Send the POST request to get the access token
    response = requests.post(token_url, data=token_data)
    
    if response.status_code != 200:
        return JsonResponse({"error": "Failed to fetch access token", "details": response.json()}, status=500)
    
    token_info = response.json()
    access_token = token_info.get('access_token')
    refresh_token = token_info.get('refresh_token')
    
    if not access_token:
        return JsonResponse({"error": "Access token not found in response"}, status=500)
    
    # Get user info from Google using the access token
    user_data = requests.get(
        "https://www.googleapis.com/oauth2/v2/userinfo",
        headers={"Authorization": f"Bearer {access_token}"}
    ).json()
    
    # Check if the user exists in the system
    user = User.objects.filter(email=user_data['email']).first()
    
    if not user:
        # If user doesn't exist, create a new user
        user = User.objects.create_user(
            username=user_data['email'], 
            email=user_data['email'], 
            password=None  # Set a default password if needed
        )
    
    # Generate JWT token
    refresh = RefreshToken.for_user(user)
    return JsonResponse({
        'access_token': str(refresh.access_token),
        'refresh_token': str(refresh),
    })

http://localhost:8000/api/auth/google/callback/

http://localhost:8000/api/auth/google/