Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/eshaan7/django-rest-durin
Token Authentication module for Django Rest Framework with different token configuration for API client.
https://github.com/eshaan7/django-rest-durin
api-client django django-rest-framework drf drf-tokens hacktoberfest python tokenauthentication
Last synced: 2 months ago
JSON representation
Token Authentication module for Django Rest Framework with different token configuration for API client.
- Host: GitHub
- URL: https://github.com/eshaan7/django-rest-durin
- Owner: eshaan7
- License: mit
- Created: 2020-10-18T20:39:22.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2023-05-03T20:04:10.000Z (over 1 year ago)
- Last Synced: 2024-09-21T19:57:33.885Z (4 months ago)
- Topics: api-client, django, django-rest-framework, drf, drf-tokens, hacktoberfest, python, tokenauthentication
- Language: Python
- Homepage: https://django-rest-durin.rtfd.io
- Size: 187 KB
- Stars: 42
- Watchers: 3
- Forks: 15
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
# Django-Rest-Durin
[](https://pypi.org/project/django-rest-durin/)
[](https://github.com/Eshaan7/django-rest-durin/actions?query=workflow%3A%22Linter+%26+Tests%22)
[](https://codecov.io/gh/Eshaan7/django-rest-durin/)
[](https://www.codefactor.io/repository/github/eshaan7/django-rest-durin)
Per API client token authentication Module for [Django REST Framework](http://www.django-rest-framework.org/).
The idea is to provide one library that does token auth for multiple Web/CLI/Mobile API clients (i.e. devices/user-agents) via one interface but allows different token configuration for each client.
Durin authentication is token based, similar to the `TokenAuthentication`
built in to DRF. However, it adds some extra sauce:
- Durin allows **multiple tokens per user**. But only one token each user per API client.
- Each user token is associated with an API Client.
- These API Clients are configurable via Django's Admin Interface.
- Includes [permission enforcing](https://django-rest-durin.readthedocs.io/en/latest/permissions.html) to allow only specific clients to make authenticated requests to certain `APIViews` or vice-a-versa.
- Configure [Rate-Throttling](https://django-rest-durin.readthedocs.io/en/latest/throttling.html) per User <-> Client pair.
- Durin provides an option for a logged in user to **remove all tokens** that the server has - forcing them to re-authenticate for all API clients.
- Durin **tokens can be renewed** to get a fresh expiry.
- Durin provides a `CachedTokenAuthentication` backend as well which uses memoization for faster look ups.
- Durin provides **Session Management** features. Refer to [Session Management Views](https://django-rest-durin.readthedocs.io/en/latest/views.html#session-management-views) i.e.,
- REST view for an authenticated user to get list of sessions (in context of django-rest-durin, this means `AuthToken` instances) and revoke a session. Useful for pages like "View active browser sessions".
- REST view for an authenticated user to get/create/delete token against a pre-defined client. Useful for pages like "Get API key" where a user can get an API key to be able to interact directly with your project's RESTful API using cURL or a custom client.
More information can be found in the [Documentation](https://django-rest-durin.readthedocs.io/en/latest/installation.html). I'd also recommend going through the `example_project/` included in this repository.
## Django Compatibility Matrix
If your project uses an older verison of Django or Django Rest Framework, you can choose an older version of this project.
| This Project | Python Version | Django Version | Django Rest Framework |
| ------------ | -------------- | ----------------------- | --------------------- |
| 0.1+ | 3.5 - 3.10 | 2.2, 3.0, 3.1, 3.2, 4.0 | 3.7>= |
Make sure to use at least `DRF 3.10` when using `Django 3.0` or newer.
## Changelog / Releases
All releases should be listed in the [releases tab on GitHub](https://github.com/Eshaan7/django-rest-durin/releases).
See [CHANGELOG](https://django-rest-durin.readthedocs.io/en/latest/changelog.html) for a more detailed listing.
## License
This project is published with the [MIT License](LICENSE). See [https://choosealicense.com/licenses/mit/](https://choosealicense.com/licenses/mit/) for more information about what this means.
## Credits
Durin is inpired by the [django-rest-knox](https://github.com/James1345/django-rest-knox) and [django-rest-multitokenauth](https://github.com/anexia-it/django-rest-multitokenauth) libraries and adopts some learnings and code from both.