🐍 Authentication & Authorization 🐍

Today’s Topics

• Setting permissions classes in views in DRF
• Token authentication in DRF with djoser
• CORS headers
• Full-text search

🎯 Project

Keep on with QuestionBox! You should be able to return questions and answers at least by tomorrow.

📖 Read | 📺 Watch | 🎧 Listen

• Finally Understand auth in DRF - a Will Vincent talk -> Will isn’t using the djoser library but he does a great job of reviewing different auth strategies and why you would choose one or the other. Watch this for a better understanding and overview of auth.

🔖 Resources

Permissions

• DRF Permissions
• Pro-Tip: Logical operators with DRF Permissions

Authentication

• Djoser documentation
• DRF docs: Token-based authentication
• The Ultimate Tutorial for Django REST Framework: Login and Authentication

CORS

• MDN CORS
  • MDN Access-Control-Allow-Origin Header
  • Julia Evans comic explaining CORS better than MDN does

Filtering and search

• DRF - Filtering -> Pretty useful reference. Includes how to filter your output based on GET parameters, which you will want to do for using search terms.
• Django docs: full-text search & the search lookup
• Blog post with more on full-text search
  • If you want A LOT more detail about full-text search in Postgres and Django, this blog piece has you covered