JWT Authentication with Django REST Framework

Question

I am having some trouble authenticating requests to a Django REST endpoint. I have a token-auth URL which points towards rest_framework_jwt.views.obtain_jwt_token, e.g.:

urlpatterns = [
    path('token-auth/', obtain_jwt_token),
    path('verify-token/', verify_jwt_token),
    path('current_user/', CurrentUserView.as_view()),
]

where CurrentUserView is:

class CurrentUserView(APIView):
    def post(self, request):
        print(request.user)
        serializer = UserSerializer(request.user)
        return Response(serializer.data)

if I create a token in the browser by visiting http://localhost/token-auth/, I can then verify it using the command:

curl -X POST -H "Content-Type: application/json" -d '{"token":<MY_TOKEN>}' http://localhost/verify-token/

however the same request called to the http://localhost/current_user/ returns a 400 code:

curl -X POST -H "Content-Type: application/json" -d '{"token":<MY_TOKEN>}' http://localhost/current_user/

{"detail":"Authentication credentials were not provided."}

Framework settings are:

REST_FRAMEWORK = {
    'DEFAULT_PERMISSION_CLASSES': (
        'rest_framework.permissions.IsAuthenticated',
    ),
    'DEFAULT_AUTHENTICATION_CLASSES': (
        'rest_framework_jwt.authentication.JSONWebTokenAuthentication',
    ),
}

And Django is being run in a container with the following Dockerfile:

FROM python:3
WORKDIR /code
COPY requirements.txt requirements.txt
RUN pip install -r requirements.txt
COPY . .
ENV PYTHONUNBUFFERED=1
EXPOSE 8000

Reza Torkaman Ahmadi · Accepted Answer · 2018-11-30 20:04:34Z

1

You should provide jwt token in your requests. here is the sample:

curl -X POST -H "Content-Type: application/json" -H "Authorization: jwt <MY_TOKEN>" http://localhost/current_user/

You are sending token by mistake in data section, instead you should provide it in Authorization header.

answered Nov 30, 2018 at 20:04

Reza Torkaman Ahmadi

3,0582 gold badges23 silver badges45 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Stuart Buckingham Over a year ago

Thanks @Reza. You were correct, the verify_jwt_token view requires the token to be sent as data, as I guess it is not an authentication method, but rather just a form response

Reza Torkaman Ahmadi Over a year ago

any time my friend :)

Collectives™ on Stack Overflow

JWT Authentication with Django REST Framework

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related