根据请求的类型，在API视图的一部分上应用tokenauthentication Django rest框架

Question

I am new to Django rest framework and struggling with api view token authentication. Following is my code

@api_view(['POST'])
@authentication_classes((TokenAuthentication,))
@permission_classes((IsAuthenticated,))

    def create_user(request):
        """
        API to add user
        """
        if request.method == 'POST':
            request_body = request.data['users']
            created_user_ids = []
            # Data must be provided and validated
            validation = UserSerializer(data=request_body, many=True)
            validation.is_valid(raise_exception=True)
            created_user_ids.append(validation.save())

            return Response(
                data={'users': [{'id': user_id} for user_id in created_user_ids]},
                content_type='json',
                status=status.HTTP_201_CREATED
            )

I need to apply tokenauthentication on part of the view not on whole view. Authentication should be based over type of the request. For example If type is POST there should not be any authentication but for the same view if request came in as PUT, GET, PATCH etc it should authenticate request.

Answer 1

If I understand well you want to apply IsAuthenticated permission to your view except when the the method is a POST .

I would suggest to create a Custom Permission :

class IsAuthenticatedOrPost(IsAuthenticated):
    def has_permission(self, request, view):
        if request.method == 'POST':
            return True
        return super().has_permission(request, view)

And use that class instead of IsAuthenticated in your @permission_classes decorator.