DRF authentication (Token, JWT) in Django - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Token Authentication in Django REST Framework?

Token Authentication is a simple way to secure API endpoints by assigning a unique token to each user. The client sends this token with each request to prove their identity.

beginner

What does JWT stand for and what is its main advantage?

JWT stands for JSON Web Token. Its main advantage is that it is self-contained, meaning it carries user information inside the token itself, allowing stateless authentication without server-side sessions.

intermediate

How does Token Authentication differ from JWT Authentication in DRF?

Token Authentication uses a simple token stored on the server linked to a user, requiring server-side storage. JWT Authentication encodes user data in the token itself, so the server does not need to store session info, making it stateless.

intermediate

How do you add Token Authentication to a DRF project?

Add 'rest_framework.authtoken' to INSTALLED_APPS, run migrations, and then include 'rest_framework.authentication.TokenAuthentication' in your REST_FRAMEWORK settings. Clients send the token in the 'Authorization' header as 'Token <token>'.

intermediate

What is the typical structure of a JWT token?

A JWT token has three parts separated by dots: Header (algorithm info), Payload (user data and claims), and Signature (to verify token integrity). It looks like: header.payload.signature

In DRF Token Authentication, where is the token stored?

A On the server linked to the user

B Inside the token itself with user data

C Only on the client side

D In the database of the client

Token Authentication stores the token on the server linked to the user. The client sends this token to authenticate.

What header do clients use to send a JWT token in DRF?

A Authorization: Bearer <token>

B Token: <token>

C Auth: JWT <token>

D X-Auth-Token: <token>

JWT tokens are sent in the 'Authorization' header with the prefix 'Bearer'.

Which of these is a benefit of JWT over Token Authentication?

A Only works with session cookies

B Simpler token format

C Requires server to store tokens

D Stateless authentication without server storage

JWT tokens carry user info inside, so the server does not need to store session data, enabling stateless authentication.

Which Django app must be added to use Token Authentication in DRF?

A django.contrib.auth

B rest_framework_jwt

C rest_framework.authtoken

D django.middleware.security

The 'rest_framework.authtoken' app provides Token Authentication support in DRF.

What are the three parts of a JWT token?

A User, Password, Token

B Header, Payload, Signature

C Key, Value, Secret

D Algorithm, Data, Checksum

A JWT token consists of Header, Payload, and Signature separated by dots.

Explain how Token Authentication works in Django REST Framework and how a client uses it.

Think about how the server and client share a secret token.

Describe the structure of a JWT token and why it allows stateless authentication.

JWT is like a sealed envelope carrying user info.