How can I implement user authentication in Django APIs?

How can I implement user authentication in Django APIs?

You can implement user authentication in Django APIs using Django Rest Framework's built-in authentication classes. Would you like a code example?

Yes, please provide a code example.

Sure! First, install Django Rest Framework. Then, in your settings.py, add 'rest_framework' to INSTALLED_APPS. Here's a simple view for user login:

from rest_framework import permissions
from rest_framework.authtoken.views import ObtainAuthToken
from rest_framework.authtoken.models import Token
from rest_framework.response import Response

class CustomAuthToken(ObtainAuthToken):
    def post(self, request, *args, **kwargs):
        user = super().post(request, *args, **kwargs)
        token, created = Token.objects.get_or_create(user=user)
        return Response({'token': token.key})

This will return a token upon successful login.

How do I secure my API endpoints after authentication?

You can secure your API endpoints by using the IsAuthenticated permission class in your views. For example:

from rest_framework.permissions import IsAuthenticated
from rest_framework.views import APIView

class ProtectedView(APIView):
    permission_classes = [IsAuthenticated]

    def get(self, request):
        return Response({'message': 'This is a protected view.'})