~/talk

Finally Understand Authentication in Django REST Framework

Talkat DjangoCon US 2018 · 2018-10-14..10-19· [python, security]
slides:none on file

Explains the four built‑in Django REST Framework auth modes and why there are four built‑in ways and over a dozen third‑party packages, demonstrates basic, session, token and JWT flows, and shows the concrete gotcha that DRF’s browsable API needs SessionAuth alongside TokenAuth. Builds a working user system with registration, password reset/confirm, social auth and sign‑up/login/logout endpoints using django‑rest‑auth and django‑allauth, publishes complete repo code and notes which approaches scale or expire and which do not.

AI-written summary · about

  1. 0:00Start
  2. 2:14How Do I Build an Api with Django Django Rest Framework
  3. 4:30Django for Beginners
  4. 6:00Api Application Programming Interface
  5. 7:44Django Rest Framework
  6. 10:38How Does Http Work
  7. 11:05Http Http Verbs
  8. 11:20Common Http Verbs
  9. 13:08Do I Have To Have a Header on a Resp on a Request
  10. 15:59Http Response
  11. 16:30What's a Rest Api Endpoint
  12. 19:14Authentication
  13. 20:22Basic Authentication
  14. 22:22Add Authentication
  15. 22:34Pros and Cons
  16. 23:08Cookies and Sessions
  17. 24:20Django Rest Framework and Pros and Cons
  18. 25:19Token Authentication
  19. 27:04Cons
  20. 28:20Javascript Web Tokens
  21. 29:06Verify Signature
  22. 32:17New Project
  23. 32:46Custom User Model
  24. 36:26Sign Up
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.