Try this: https://www.django-rest-framework.org/tutorial/4-authentication-and-permissions/