python - DRF : How to password protect the DefaultRouter

Question

您将如何保护 DefaultRouter() 以便用户在登录前无法查看 API Root？

class OrderViewSet(viewsets.ReadOnlyModelViewSet):
    permission_classes = (permissions.IsAuthenticated)
    queryset = Order.objects.all()
    serializer_class = OrderSerializer

router = routers.DefaultRouter()
router.register(r'orders', views.OrderViewSet)

urlpatterns = [
    url(r'^', include(router.urls)),
    url(r'^auth/', include('rest_framework.urls')),
]  

项目.urls.py

# API
url(r'^api/', include(api_urls)),

Answer 1

您可以在 settings.py 文件中添加默认权限类:

REST_FRAMEWORK = {
    'DEFAULT_PERMISSION_CLASSES': (
        'rest_framework.permissions.IsAuthenticated',
    )
}