How can I use allauth in API?

[LucasLeone]

Hi everybody!

How can I use allauth in API? I want to do a REST API so I don't want to use the users' module.

Thanks!

[browniebroke]

I've used https://django-rest-auth.readthedocs.io in a project, and it integrates with allauth, however I later heard some good things about https://jazzband.github.io/django-rest-knox to do API auth well. I have no idea if that second option integrates with allauth though.

[foarsitter]

The author of allauth has received a grand to achieve API support: https://allauth.org/news/2024/03/ngi-zero-grant-plan/ but don't know anything about the progress.

Update: almost there I see: https://allauth.org/news/2024/04/api-feedback/

[browniebroke]

Looks like it has been released in 0.63: https://docs.allauth.org/en/latest/release-notes/recent.html

An official API for single-page and mobile application support is now available, via the new allauth.headless app.

Documentation: https://docs.allauth.org/en/latest/headless/index.html

[foarsitter]

Had a short discussion with the author and I'm struggling with the implementation. It is designed as an separated API and I'm not very fond of it to supply a second API to my clients: pennersr/django-allauth#3737

[quroom]

I more like https://dj-rest-auth.readthedocs.io/en/latest/
If you are considering jwt token authentication and refresh token in frontned with backend.
It's easier to use dj-rest-auth beacuse django-rest-auth doesn't support jwt refresh endpoint

[LucasLeone]

I'm using TokenAuthentication, maybe I'm gonna wait for allauth API support. Thanks everybody!

[foarsitter]

The API allauth is developing will be a standalone API without any DRF integration. So I don't think it will benefit us since we cannot incorporate the endpoints in the rest of the API. So you will point your clients to a different OpenAPI spec when it comes about authentication.