Django API Authentication using JWT Tokens

👉 Check our website: scalablescripts.com
Python Django login and generate JWT Token using HttpOnly Cookies. We will Login using JWT( JSON Web Token ) which is the standard method for SPA Authentications. We will not use the traditional "Bearer method" but instead we will login using HttpOnly cookies which is a more secure authentication.
Source Code: github.com/scalablescripts/dj...
This video can be combined with other videos:
React and Django JWT Authentication: • React & Django JWT Aut...
VueJs and Django JWT Authentication: • VueJS & Django JWT Aut...
Angular and Django JWT Authentication: • Angular & Django JWT A...
NextJS and Django JWT Authentication: • NextJS & Django JWT Au...
NuxtJS and Django JWT Authentication: • NuxtJS and Django JWT ...
Svelte and Django JWT Authentication: • Svelte & Django JWT Au...
00:00 Preview
00:28 Django Rest Framework Setup
02:48 User Model
05:43 Database
08:47 Register
19:21 Login
30:22 Authenticated User
35:01 Logout
#python #django

[@learningchannel4001]

The best token based Authentication I have watched. Very detailed. Thank you

[@dawoodsiyam512]

man you are the best, straight to the point, no copy pasting, and very easy and readable code and step by step process, something that lots of tutorials struggle with, thank you so much.

[@abdirahmanabdullahi1966]

Is loggingView working for you?

[@jasonvilla3696]

Watching this today, although this is 3 years ago and there is an optimized way to use JWT, this really helped me understand what happens during a JWT authentication. Kudos

[@MissoyKE]

share link for the optimized way

[@shagilislam2533]

Truly the smoothest and most accurate Django-JWT Tutorial I've ever seen!!!

[@raulemilianomirandagutierr3313]

Man you don't know how much I appreciate this video, let me tell you I've been looking for something like this for weeks, let me tell you there's nothing.

[@jaitungodhani2334]

plz tell me if you know how i applied Bearer method in video video instead of cookies.

[@nicolasportelli3766]

Very good video! Without getting lost in the bush, getting to the concept clearly Greetings from Argentina!

[@EveryGameArchive]

Thanks! I had hard times trying to discover how to use jwt and you solved all questions that i had.

[@aryanagarwal2257]

Thank You! You have explained it so clearly, I haven't been able to understand this since days but with this one I was able to easily

[@HEATER_APP]

super straightforward and concise, great job!

[@zakariaazahaf394]

I dont usually comment on yt videos, but this video is so damn good, with your explanations and the way how you talk. Keep up brother

[@konstantinoskostopoulos9794]

Thanks a lot man, I had a hard time until I saw this one. The explanations were on point as well, cors even fixed a front-end problem my team had. Hope you grow big!

[@ScalableScripts]

Glad it helped!

[@nepdevtech]

@@ScalableScripts I am getting error while decoding the token in userview

[@goodboy435]

@@nepdevtech me too... For me it says. " 'str' object has no attribute 'decode' " Have u got the solution??

[@jayantpatankar5967]

@@ScalableScripts why I am getting - RecursionError: maximum recursion depth exceeded while calling a python object. How to solve...

[@loganathant9840]

​@@goodboy435 decode is not needed since its already decoded remove the decode and it will work

[@bilaltufaildev]

Perfect Tutorial for basic auth so far. Loved it! Keep it up Sir! 💖

[@devniel]

Awesome! thanks for your explanation. I just want to remind these typical topics for django, it always important to continue improving our skills.

[@gamingfundas]

very well explained....loved this. Yeah, some exceptions are that, the person has to make a create_superuser function to create a superuser but its fine. JWT explained wonderfully

[@allanalais7859]

in serializer?

[@thabosiphiwemngoma1859]

This is an amazing video. So clear. Answered most of my questions before I asked them.

[@abbaskareem5281]

This is the best video on JWT and tokens in django and django-rest-framework ... thank you million times sir ❤❤

[@sorooshmoghimi5494]

that was really helpful, and very straightforward! Thank you so much.

[@sushovitshah9083]

Best video for drf authentication. Totally loved it and learned a lot.

[@shadmanlatif6530]

Legit helped me

[@ArghyaBhattacharyaNITA]

Thanks for the clear explanation. Bdw, what about the refresh token.. don't we need that as well ??

[@manolismandamadiotis5853]

very helpful video and keeping it simple tthanks!

[@roamandlift]

Such a dope explanation 🔥🔥🔥

[@davidadu-tenkorang3186]

Excellent work. Thank you

[@rashedulhasanporosh7722]

Thank you so much. It was a great help!

[@pradyumnabharadwaja8237]

The best explainantion and ONPOINT, loved it, Thank you 🙏

[@maksymmalicki2720]

Amazing tutorial, thank you very much!

[@imcamilaaa]

thank you so much for the video, because of this now i and my group can sleep in peace hahahaha

[@keshavachandu99]

I learnt a lot here Thank You !!!

[@johntygomes6519]

Very Greeat Explanation Sir...ThankYou

[@marcellacarvalho6705]

Thank you for this. You are awesome!

[@shashishekhar----]

Great content, subscribed !

[@jorgeperalta9780]

awesome video! Thank you!

[@_nishadkv]

Helps a lot.. Thanks buddy

[@user-dev953]

This was very helpful thank you

[@user-en1km2zj5v]

thank you very much. excellent presentation of the material

[@nguyenichthanhtu8502]

This is Awesome, helpful for me. Thanks

[@NiM44]

Very well explained , Thanks

[@abcrectify6916]

Thanks for making this video.

[@mrek1668]

Great video! If I'm using Django templates instead of a separate front end, can I still use JWT for authentication?

[@jakubrudy9372]

thank you for this tutorial very much!

[@yaroslavstetsko4174]

It is perfect tutorial, thank u, and continue.

[@edwardzombie9222]

Спасибо большое за урок! Очень помог!

[@k1vz_]

very nice, thank you!!

[@nicklennonfortes9611]

best teacher ever

[@Experts_top_5]

Excellent man!! thanks a lot

[@gregocanepa]

Awesome tutorial dude! One question: at 21:08 when you are fetching the user from the db, why do you do a filter and then a first instead of simply a get()? Thanks!

[@souravjha2146]

filter(), whenever you expect more than just one object that matches your criteria. If no item was found matching your criteria, filter() returns am empty queryset without throwing an error. get(), you expect one (and only one) item that matches your criteria. Thus if there are more than one objects returned in queryset we would know that via filter

[@luisematos_]

I have to say THANK YOU!

[@Travellife8877]

just osm content and step by step explaination

[@Acel-01]

GREAT Tutorial!

[@hyunjungoh6672]

I love this video!!!!! the best ever!

[@paasxx]

Superb content, very helpful

[@frankydubi]

The biggest THANK YOU!

[@PartimeMemer]

Amazing tutorial dude

[@aleksandrsemenov1764]

Great job, thanks!

[@anarbairam]

great explanation!

[@jadedanial3255]

great tutorial! thumbs up!

[@shubhamathawane02]

Can you tell how can i send token from frontend to backend again for each request as i am storing it as cookie on frontend ?

[@juiceearthhh7225]

Thanks helped a lot

[@adhy612000151]

Thanks a lot good man! God always bless you!

[@adhy612000151]

Many Many Thanks For you good man!

[@Craennie]

The cookies aren't saving automatically when I use ReactJs - Axios. How can I save the cookies automatically and also send it as part of the request using Axios or Fetch API

[@mayankdandwani9951]

Superb Content Bro

[@HarshitGupta-vo5bm]

is that pyjwt assigns refresh token to user , just like simple jwt does ? also does it refresh tokens automatically after expiration time ?

[@achrafbilal4200]

The best (from morocco)

[@engrnasirshah4426]

Thanks very will explanation

[@ivanromanov7120]

Thank you for video! Can you tell what is the soft you use for DataBase on 06:42 ?

[@Nikhil-Tomar]

What about CSRF policies and securities, Why are they not applied here?

[@markgemesi6783]

thanks, good video

[@angwamoses5005]

Please, how can i use django default isAuthenticated permission instead of having to check if the token is in cookie.

[@na_na_na6577]

Thank you very much

[@duberlyivanmondragonmancha6198]

Good video!!

[@estrum1647]

amazing video

[@muruganraja9]

Excellent tutorial,

[@understand1004]

26:10 dont need to .decode("utf-8") just token = jwt.encode(payload, 'secret', algorithm='HS256') that's it

[@majmunovski]

Thank you very much!

[@ScarxciaSkaix]

Thank you so much!

[@musicbrorijit]

Does this work for multiple users getting logged in and out at the same time?

[@gautammishra96]

Don't we have to invalidate the JWT before removing it?

[@TommyBrick]

Hi, great video! One question: At @26:12, why did you decode the token? I get the error "'str' object has no attribute 'decode'" If I drop the decoded I get a decoded string.

[@matteob9342]

Hi, You can downgrade the PyJWT package to 1.7.1 or remove the call to decode. It should work

[@TommyBrick]

@@matteob9342 removed .decode() and it dit work fine afterwards. Thanks!

[@goodboy435]

Got same error.. Just after an year.

[@goodboy435]

@@matteob9342 thanks matteo... Ur removing decode() call method worked for me too...

[@toufikbenkhelifa917]

@@goodboy435 how can i do it ?

[@muskulanikhil3623]

you are a life save dude

[@toufikbenkhelifa917]

can i ask u ?

[@omarchristie3923]

Hey, I did this auth and now connecting it to Vue js frontend but when I sign out, I am still able to access protected views that need authentications. Only when I clear the browser cookie do the access stop. Also the cookie is still within the header when I sign out. How can I fix this? it work fine in postman.

[@achirasilva2567]

There's a issue with "utcnow()" function in newer django versions. My cookie instantly get deleted.

[@novoehuevoe9340]

Do you know how to use JWT auth in django's admin interface?

[@mehboobshaikh8396]

can you make a video on how to integrate Django rest framework with Keycloak?

[@AshishSingh-dn8wb]

Can we use this cookie based authentication with React Native?

[@davidadu-tenkorang3186]

Can PyJWT and Simple JWT be used for a django project? Also when the data from the frontend gets to the backend, django raises an error with the email. Thank you for your attention

[@helissonoliveira3807]

Did you figured out way this happens?

[@baldevvermamohapatra2146]

I'm getting type error when using a id of a foreign key of a model to reference the payload

[@faridhabibli625]

Thanks a lot man

[@allanalais7859]

How can I create super users?

[@jaitungodhani2334]

how i fetch token data same like you when i passing token in barrier token panel plz tell me if any ideas

[@sergeysoloviov9802]

if someone have login error with str.decode blahblah. it can be fixed with freezing PyJWT==1.7.1 in requirements.txt

[@faysalahmed3601]

'User' object has no attribute '_default_manager' getting this error at 15:21 minutes. Can anybody suggest me some solutions?

[@assaqofi]

thank alot this is what i am looking for, but how to update the user data ?

[@joventan4303]

Thank you! :)

[@jaitungodhani2334]

how i perform traditional Bearer method for above code plz tell me if you know

[@nikhilaryal5589]

Thanks man!!

[@JohnBiddulph]

29:08, I have installed django-cors-headers and added to settings app and middleware, I am getting: No module named 'corsheaders' please help

[@kevinbeano1916]

great tutorial. How about the guard ?

[@user-ed9yw3nz4s]

thanks for high quality video, but i have a question for you~~ in the Userview part,, why you attech code -> ".first()" ?? when I want all of the logined people, how can i???

[@ScalableScripts]

Because filter() returns a List and I add .first() to retrieve a single object. To get all the logged in users you have to store the jwt with the user_id in a database

[@user-ed9yw3nz4s]

@@ScalableScripts explain code??TT

[@blabla-kk8bl]

Is it refreshing jwt token automatically after expiry?

[@RiderGopal0102]

Tysm. Plz login using role such admin, user,student,teacher..plz make video on this