DRF JWT 在 OPTIONS 请求上不需要令牌

Question

How can you make JWT not check and require a token when user does an OPTIONS-request?

I have defined my own options(self, request, *args, **kwargs) method, but as long as the permission_classes = [isAuthenticated] is enabled, the user is asked to provide login credentials...

The API we are using in React to interact with DRF has to do an OPTION-request, which does not contain any headers. When it does not get a 200 code back, it does not perform the actual request to the server...

Answer 1

I think the most simple way is to declare custom permissions and use it (in a permissions.py file):

from rest_framework import permissions

class IsAuthenticated(permissions.IsAuthenticated):

    def has_permission(self, request, view):
        if request.method == 'OPTIONS':
            return True
        return super(IsAuthenticated, self).has_permission(request, view)

and in the settings change the DEFAULT_AUTHENTICATION_CLASSES to this class...