add authentication

mysite/settings.py

@@ -123,3 +123,9 @@
 # https://docs.djangoproject.com/en/3.0/howto/static-files/
 
 STATIC_URL = '/static/'
+
+REST_FRAMEWORK = {
+    'DEFAULT_AUTHENTICATION_CLASSES': (
+        'polls.api_authentication.AdminOnlyAuth',
+    )
+}

polls/api_authentication.py

@@ -0,0 +1,18 @@
+from django.contrib.auth import authenticate
+
+from rest_framework import authentication
+from rest_framework import exceptions
+
+
+class AdminOnlyAuth(authentication.BaseAuthentication):
+    def authenticate(self, request):
+        try:
+            username = request.query_params.get('username')
+            password = request.query_params.get('password')
+            print(username, password)
+            user = authenticate(username=username, password=password)
+            if user is None:
+                raise exceptions.AuthenticationFailed('No such user!')
+            return (user, None)
+        except:
+            raise exceptions.AuthenticationFailed('No such user!')

polls/api_views.py

@@ -3,6 +3,7 @@
 
 from .models import Question, Choice
 from .serializers import QuestionSerializer, ChoiceSerializer
+from .api_authentication import AdminOnlyAuth
 
 
 class QuestionViewSet(viewsets.ModelViewSet):