Django REST API Tutorial - Token Authentication and Session Authentication #3 (2018)

[@harperjmusic]

This is one of the best, most straightforward and helpful tutorials I've come across! Liked and subscribed. Cheers.

[@FreeDomSy-nk9ue]

YOU ARE AWESOME. You truly understand what's going on, hence explaining it thoroughly. Thank you

[@brucemarshall6388]

Although there are some problems(all solved now:), this is a helpful video, clear and simple. Thank you sir!

[@md.abdullahalmamun117]

There is a module which has been deprecated for django update version. Such as, In "urls.py" "from django.contrib.auth.views import LoginView" should be added or it won't work and in "urlpatterns" of "urls.py" " path('login/', LoginView.as_view(), name='login')" path should be added like this. If anyone is watching this tutorial now then, they have to make this slight changes for making the code work perfectly. Thank You. And this was an awesome journey with @The Dumbfounds

[@techyguys4394]

It is just the best full video on internet on auth topic thank you so much

[@TheSirgo23]

Simplest and best tutorial Ive seen about DRF auth thx man

[@muzehub4802]

perfect tutorial, simple and efficient way to teach.

[@vladotrocol1155]

Very simple and clear video! Thank you for your work!

[@thedumbfounds767]

Welcome!

[@UBLAunripped]

Really good -- thank you. We loved your SA Accent

[@yousufm.n2515]

Great tutorial series!

[@grijeshmnit]

Very helpful. Thanks

[@teejaay_me]

Nice, I am following this series.

[@thedumbfounds767]

Tam Xid great, hope you've liked it!

[@5up5up]

That's a great tutorial. Thank you sir.

[@UBLAunripped]

We were just a little confused about what API requests are needed for a NEW user registration -- in your video you created and used the superuser -- would love to know how to do it for a brand NEW user via http - thanks

[@lolitalolita5290]

Do you have any video login in with dja go rest api and volley ?

[@x4iiiis]

Hey! Just wondering if you might be willing to make a short video about how you might go about using this externally? Perhaps a small java application that would post something to the site via the API? I have used your videos to create my API (thank you!), and would like to be able to use it in this way in future - possibly for game leaderboards and such like.

[@dominiclee3809]

what do you mean by externally? if you are referring outside of localhost you would have to deploy your backend to cloud using heroku or AWS

[@whichdude420]

So is this a way to make the REST API to only be accessible by a specific web app or mobile app?

[@sangayvlogs4328]

thank you so much for the video. bu i got problem that says ImportError : cannot import name 'login' .

[@thedumbfounds767]

what's your code?

[@sangayvlogs4328]

urls.py/rest_tutorial from django.contrib import admin from django.urls import path, include from .router import router from rest_framework.authtoken import views from django.contrib.auth.views import login urlpatterns = [ path('snippets/', include('snippets.urls', namespace='snippets')), path('admin/', admin.site.urls), path('api/', include(router.urls)), path('api-token-auth/', views.obtain_auth_token, name='api-token-auth'), path('login/', login, name='login') ] login.html/registration/templates/rest_tutorial {% csrf_token %} {{ form }} Login settings.py/rest_tutorial TEMPLATES = [ { 'DIRS': [[os.path.join(BASE_DIR, 'rest-tutorial/templates')],], }

[@thedumbfounds767]

try using django.contrib.auth.LoginView instead (it's a CBV). The authentication FBVs are or will be deprecated and removed.

[@sangayvlogs4328]

@@thedumbfounds767 thank you it worked.

[@thedumbfounds767]

@@sangayvlogs4328 you're welcome!

[@amjadelbaba7214]

how can I make the same thing in authentication token, but from a table in my database not the super user table?

[@artemsymcov3980]

how to allow new users to register? they don't have password and login yet to get token... ?

[@mohammedbayomy6154]

what do you mean by making sure api is under https when using token authentication otherwise people will sniff netwrok

[@thedumbfounds767]

HTTPS means that the connection is encrypted. If the connection is not encrypted (HTTP only), middlemen can just grab the packets you're trying to send and read their content which you don't want. Have a look at TLS/SSL if you want to better understand this subject.

[@RichardSoderblom]

Great video! Thanks

[@thedumbfounds767]

Thanks Richard!

[@TalhaHasanZia]

I was thinking of sign-up a user using REST, for this I wanted to create a POST endpoint and call users.create of django models. It works fine when i run script on server. But how can I create a POST call , with BASIC AUTH, so that when I register a user, it can goto django-admin user table? TL;DR: How to create a POST api for register user that saves user to django users table?

[@shansodhara6580]

How to maintain both authentication for mobile app clients and web app clients, while using http in url, session authentication was working for both mobile and web, after changing to https with ssl configured in Apache web server. Web only working, from mobile apps after login getting 403 error. ... Thanks

[@theqjao]

Hi professor, nice video, i'm still getting this error, can u help me please ?, 'BasePermissionMetaclass' object is not iterable

[@thedumbfounds767]

stackoverflow.com/questions/53649252/django-rest-framework-basepermissionmetaclass-object-is-not-iterable

[@aminamjadism4826]

Thanks

[@kilianlegters8183]

What even are you saying at the very start of the video? Legit I hear so many things at the same time but none make any sense. Great and wel explained video though!

[@thedumbfounds767]

Heyaho po day is going great (aka. "Hey, I hope your day is going great") ;)

[@sundar8032]

Great work :)

[@thedumbfounds767]

Thx!

[@EddyCaffrey]

Thanks bro. Great job

[@thedumbfounds767]

thank you Edi!

[@santhoshkumar-uj4tx]

I got the Token and if i make an http call without the token in header, still its returning 200 success status.. is that the right behavior? Can anyone help me on this?

[@miguelrohv5643]

Bro. Can i ask... when i created the registration folder with login.html under rest-tutorial>templates... it says templatedoesntexist.... but when i move the registration folder with login.html to snippets>templates. It works, what did i miss?

[@miguelrohv5643]

Also great vids! Subbed ^^

[@thedumbfounds767]

miguel rohv By default, django only looks for templates inside of your apps, not in the main folder. If you want to change that, go to the settings under templates, and set DIRS = [os.path.join(BASE_DIR, 'rest-tutorial/templates/')]. Hope that helps!

[@thedumbfounds767]

miguel rohv and thanks for the sub!

[@miguelrohv5643]

it works! thanks a plenty bro!

[@thedumbfounds767]

miguel rohv you're welcome!

[@animeshtimsina3660]

You used httpie...Is it a 3rd party program and if so, are there other services that I can use?

[@thedumbfounds767]

Yes, it is a free command line utility. Check this out for alternatives: alternativeto.net/software/httpie/

[@white.wolf1223]

you can use POSTMAN its very popular

[@tejasmankar71]

how to add REST API in form or how to add serilization in form.py for using html page? can you plz make the videos to call api from html page ?

[@thedumbfounds767]

You just have to use javascript in your html template with something like the fetch api or jquery ajax if you are using jquery.

[@tejasmankar71]

The Dumbfounds can you plz suggest any videos ?

[@thedumbfounds767]

@@tejasmankar71 just look up django ajax javascript on google and you should find some examples

[@miltonweinhold6859]

oauth2?

[@husseinsaad7969]

wait for next video :)

[@thedumbfounds767]

Nice! Which videos would you like to see in the future?

[@husseinsaad7969]

I wanna complete this series(REST framework), it is perfect ... keep going!

[@thedumbfounds767]

thanks for the kind words! For now, there is going to be one more part about filtering. But maybe I'll extend this series in the future (after the TDD series) to include, for example, a video about testing your REST API :)

[@ashishrock9585]

How to call in browser

[@ГеоргВартанов]

thank you. like

[@thedumbfounds767]

thanks Georg!

[@turbokev3772]

DEPRECATED!!! ImportError: cannot import name 'login' from 'django.contrib.auth.views'

[@thedumbfounds767]

Use the generic class based view called LoginView instead.

[@turbokev3772]

@@thedumbfounds767 Yes thank you. I see that now. Thank you for your tutorials. I apologize for the tone I get frustrated coding sometimes.

[@thedumbfounds767]

@@turbokev3772 haha, no prob!

[@AdamRubiks]

work aavanila bro

[@altairgames8054]

im the 666 like lmao

[@dawoodalbarakani9115]

A very helpful tutorial, thanks a lot.