Why does LoginView have permission_classes = (IsAuthenticated,)

[ghost]

Hi,
I currently use djoser library to do the equivalent but want to be able to support multiple tokens per user which rest-knox supports. But I am unable to get it to work.

I am trying to get rest-knox to work but running into an HTTP 401 issue that I think others have reported. However I dont understand why you have LoginView have permission_classes = (IsAuthenticated,) Shouldnt this be changed AllowedAny.

Why should you have some other type of login first and then call the rest-knox login to login again?
If you look into the login view of djoser, that also has AllowAny permission for the login view.

Thanks

[belugame]

I too asked myself that question. Maybe we should consider renaming it as the view does not really login a user, but generate a token for the user.

You need to send credentials to the view, e.g. via BasicAuth to "login" and in return you receive a token.
AllowAny would not work, as it would return a token for anyone or rather not know what user requests a token.