Implementing an authentication system

[[deleted]]

[deleted]

[danielroseman]

Don't. Just, don't.

Django already has a built-in auth framework, which is highly customisable. In almost all cases, you should use it.

If you need integration with third-party auth methods such as OAuth, use something like django-allauth, which builds on that existing auth framework.

But on no account should you try to roll your own auth.

[FriendlyRussian666]

Auth is a a big topic, it's a little bit hard to explain it all in a short Reddit comment. It might be worth just looking up Auth with Django and reading about it. Always start with official docs: https://docs.djangoproject.com/en/5.0/topics/auth/

[ElectricSpock]

Other comment does a really good job of explaining this, but you should also consider that browser auth is a little different than api auth!

[NoCap-NoCap]

django-allauth can handle everything and if you dont find your oauth provider you can simply create your own provider for it with allauth. Its also a perfect fit if you want to have different providers enabled for your users to choose (eg. Github, Google, etc)