Let's say I want to create an iOS application that uses the RESTful API as a backend.
I would like to use the Django Rest Framework for this. For three reasons:
- Python is awesome
- Django is awesome
- The Django Rest Framework is popular and well-documented.
My application will need to authenticate users to control access to various API endpoints. I will need to authenticate my clients through
- my own OAuth2 provider
- Third-party OAuth2 providers (e.g. Facebook)
I found the Django Oauth Toolkit to be the de facto standard for creating my own OAuth2 provider. Integration with the Django Rest Framework is also well documented and easily achievable.
So far so good.
Now what if I want to add registration / login through third parties? (Facebook, Twitter, etc.).
I assume that the process will look like this.
And without third parties
I think I will need to add social account tokens to user models (for re-authentication and interaction with third-party APIS). Django-allauth does this, and I use it in one of my projects, but unfortunately django-allauth does not seem to match the current use case because the client is not provided by Django.
, () / Django Rest Framework Django OAuth Toolkit? Python Social Auth, , Django Oauth Toolkit.
?
/ Django?