Django在企业级Web应用开发中的应用技巧

from django.db import models

class EnterpriseUser(models.Model):
    # 企业用户核心字段
    employee_id = models.CharField(max_length=20, unique=True)  # 员工工号
    department = models.ForeignKey('Department', on_delete=models.PROTECT)  # 关联部门
    security_level = models.IntegerField(choices=[(1, '普通'), (2, '机密'), (3, '绝密')])  # 安全分级
    last_login_ip = models.GenericIPAddressField(null=True)  # 记录登录IP
    meta_data = models.JSONField(default=dict)  # 扩展字段容器

    class Meta:
        indexes = [
            models.Index(fields=['department', 'security_level'])  # 复合索引
        ]

# 企业级审计中间件（Python 3.9 + Django 4.2）
class AuditMiddleware:
    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        # 请求预处理
        start_time = time.time()
        if '/api/' in request.path:
            log_action('API_ACCESS', request.user, extra={'path': request.path})

        response = self.get_response(request)

        # 响应后处理
        duration = time.time() - start_time
        response.headers['X-Process-Time'] = f'{duration:.2f}s'
        return response

# 电商商品详情页缓存方案（Python 3.9 + Django 4.2 + Redis 6.2）
from django.core.cache import caches

def get_product_detail(product_id):
    cache = caches['product']
    key = f'product_detail_{product_id}'
    data = cache.get(key)
    
    if not data:
        # 缓存未命中时从数据库读取
        data = Product.objects.select_related('category').get(id=product_id)
        # 设置缓存并添加随机过期时间防雪崩
        cache.set(key, data, timeout=3600 + random.randint(0, 300))
    
    return data

# 企业OA系统审批流API（Python 3.9 + Django 4.2 + DRF 3.14）
class ApprovalViewSet(viewsets.ModelViewSet):
    queryset = Approval.objects.all()
    serializer_class = ApprovalSerializer
    permission_classes = [IsAuthenticated, DepartmentPermission]

    @action(detail=True, methods=['post'])
    def approve(self, request, pk=None):
        instance = self.get_object()
        # 业务逻辑验证
        if instance.current_step >= instance.total_steps:
            return Response({'error': '流程已结束'}, status=400)
        # 执行审批操作
        instance.progress()
        return Response({'status': 'approved'})

# 支付模块单元测试（Python 3.9 + Django 4.2）
class PaymentTest(TestCase):
    @classmethod
    def setUpTestData(cls):
        cls.user = UserFactory()
        cls.order = OrderFactory(amount=100)

    def test_payment_flow(self):
        # 模拟支付请求
        response = self.client.post(
            '/api/payment/',
            {'order_id': self.order.id, 'amount': 100},
            HTTP_AUTHORIZATION=f'Bearer {self.user.token}'
        )
        self.assertEqual(response.status_code, 200)
        # 验证数据库状态变更
        self.order.refresh_from_db()
        self.assertEqual(self.order.status, 'paid')

# 安全配置示例（settings.py）
SECURE_CONTENT_TYPE_NOSNIFF = True
CSRF_COOKIE_HTTPONLY = True
SESSION_COOKIE_SECURE = True
SECURE_HSTS_SECONDS = 31536000  # 强制HTTPS一年
CSP_DEFAULT_SRC = ("'self'", )  # 内容安全策略

# Gunicorn配置文件（gunicorn.conf.py）
workers = 4  # CPU核心数*2+1
worker_class = 'uvicorn.workers.UvicornWorker'
timeout = 120
keepalive = 65
accesslog = '-'
errorlog = '-'