django-rest-framework returning 403 response on POST, PUT, DELETE despite AllowAny permissions
问题 I'm using a django-oneall to allow social login session authentication on my site. While it isn't one of the suggested auth providers for django-rest-framework, rest_framework.authentication.SessionAuthentication uses django's default session authentication. so I thought it should be fairly simple to integrate. On the permissions side, ultimately I'll use IsAdmin , but for development purposes, I just had it set to IsAuthenticated . When that returning 403s, I relaxed the permissions to