Authentication with REST Framework Django

Question

I'm new to Django and curious how the authentication of Rest Framework works.

So as I understand, the flow of authentication is: Frontend sends request with username and password > Backend (Django) sends back token > From then on frontend send this token in header to authenticate.

But because anyone can see the header I send, so how is this safe?

Oliver Lorton · Accepted Answer · 2019-12-16 20:41:56Z

1

For this to be secure you should only ever authenticate over an https connection. When using an https connection the header/token/cookie/whatever will be encrypted.

answered Dec 16, 2019 at 20:41

Oliver Lorton

7391 gold badge6 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Authentication with REST Framework Django

1 Answer 1

Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Related