Suppose you want to achieve the following: - a DRF backend - a React (or other pure JS) frontend - users will authenticate via an OpenID Connect service such as AWS Cognito, Auth0 or similar.
What are the recommended ways of achieving that? I imagine in 2023 something like this would be one of the main use cases for DRF - so is there a standard, community-endorsed, well-developed and well-supported answer? A few notes and clarifications: - I don't want Django to be an OpenID provider. All my users registrations will be via a third party service such as AWS Cognito or Auth0. - There is an old question <https://groups.google.com/g/django-rest-framework/c/MGbKZewe-Zo/m/PzY7ICFkDAAJ> in this group that asked a similar question. The suggestion there was to use the JWT one receives from OpenID to exchange for a Django session authentication. But no further details were offered on how to achieve that. - Whatever the right solution is, it will need to handle the use case where someone is logging in with their OpenID credentials for the first time i.e. it will need to handle automatically creating (and later updating) a user record in django. Many thanks for any advice you can offer. Geoff -- You received this message because you are subscribed to the Google Groups "Django REST framework" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-rest-framework+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/django-rest-framework/d014691f-350e-4e51-8fc8-4c2bcfb04068n%40googlegroups.com.
