Django Rest Framework how to disable authentication and authorization

Question

I am trying to build a system in Django without using any of its batteries -- auth, admin etc. The system uses the Django rest framework for the API.

However, when I try to request to an API, I keep getting this error:

Model class django.contrib.auth.models.Permission doesn't declare an explicit
app_label and isn't in an application in INSTALLED_APPS.

I do not want to use django.contrib.auth at all. I did the following inside my DRF API View class:

class NewsPostView(APIView):
    permission_classes = None

    def get(self, request, format=None):
        posts = NewsPost.objects.all()
        serializer = NewsPostSerializer(posts, many=True)
        return Response([])

However, I am still getting the same error. How can I disable auth from DRF?

show us your settings.py

Mazel Tov
– Mazel Tov

2018-04-06 13:24:12 +00:00
Commented Apr 6, 2018 at 13:24 — Mazel Tov
– Mazel Tov, Commented Apr 6, 2018 at 13:24

Artyom Tsoy · Accepted Answer · 2019-04-06 16:46:24Z

9

I have solved my issue. After @Linovia's response, I checked the docs etc of DRF and changed the following properties:

REST_FRAMEWORK = { 
    'DEFAULT_AUTHENTICATION_CLASSES': [],
    'DEFAULT_PERMISSION_CLASSES': [],
    'UNAUTHENTICATED_USER': None,
}

And everything worked.

edited Apr 6, 2019 at 16:46

Artyom Tsoy

2,2381 gold badge14 silver badges18 bronze badges

answered Apr 6, 2018 at 17:09

Gasim

8,05114 gold badges72 silver badges145 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

George Bikas Over a year ago

This should be the accepted answer. Also, you could make it explicit that this configuration goes inside REST_FRAMEWORK settings. Specifically REST_FRAMEWORK = { 'DEFAULT_AUTHENTICATION_CLASSES': [], 'DEFAULT_PERMISSION_CLASSES': [], 'UNAUTHENTICATED_USER': None, }

Aneesh R S · Accepted Answer · 2018-04-06 13:33:27Z

6

Use AllowAny instead of None. And also your response seems to be returning empty list. use serializer.data for retrieving data

from rest_framework.permissions import AllowAny

class NewsPostView(APIView):
    permission_classes = (AllowAny,)

    def get(self, request, format=None):
        posts = NewsPost.objects.all()
        serializer = NewsPostSerializer(posts, many=True)
        return Response(data=serializer.data)

answered Apr 6, 2018 at 13:33

Aneesh R S

3,8174 gold badges25 silver badges35 bronze badges

Comments

Linovia · Accepted Answer · 2018-04-06 13:37:14Z

3

Make sure you don't use rest_framework.urls and that your settings has:

'DEFAULT_AUTHENTICATION_CLASSES': tuple(),

as well as your views. With some luck, you won't have the authentication imported through another import.

answered Apr 6, 2018 at 13:37

Linovia

21.1k4 gold badges53 silver badges51 bronze badges

Collectives™ on Stack Overflow

Django Rest Framework how to disable authentication and authorization

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related