# What guide should i follow to set up protection to my django rest API?

**URL:** <https://community.auth0.com/t/what-guide-should-i-follow-to-set-up-protection-to-my-django-rest-api/117310>\
**Category:** Get Help\
**Tags:** apis, application\
**Created:** [September 27, 2023, 9:17pm UTC](https://community.auth0.com/t/what-guide-should-i-follow-to-set-up-protection-to-my-django-rest-api/117310 "2023-09-27T21:17:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![carloso0114](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/carloso0114/32/51221_2.png) [@carloso0114](https://community.auth0.com/u/carloso0114)\
**Post date:** [September 27, 2023, 9:17pm UTC](https://community.auth0.com/t/what-guide-should-i-follow-to-set-up-protection-to-my-django-rest-api/117310/1 "2023-09-27T21:17:26Z")

</div>

Im using React for frontend, and i wa able to login/logout using either auth0 users database and google/icloud/microsoft accounts, and im able to get the getAccessTokenSilently() and use my urls endpoints, however i realized that i could use the access token and send anything in the body of the request.

My goal is to create posts that belongs to the current user, verifying that the body from the request is indeed the info from the user.

For example

user = “oauth-g | 2398908203 "  
tex = " testing”

Are there any topics or guides related to this matter?

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [September 27, 2023, 10:24pm UTC](https://community.auth0.com/t/what-guide-should-i-follow-to-set-up-protection-to-my-django-rest-api/117310/3 "2023-09-27T22:24:46Z")

</div>

Hello @carloso0114 welcome to the community!

> [@carloso0114](#):
>
> Are there any topics or guides related to this matter?

We provide a guide on setting up a Django API (below), but verifying the body of the request is a bit outside the scope of Auth0 - You can verify that the user has the correct permissions, but the body itself you’d need to handle on your end as far as I’m aware.

[https://auth0.com/docs/quickstart/backend/django/interactive](https://auth0.com/docs/quickstart/backend/django/interactive)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [October 11, 2023, 10:25pm UTC](https://community.auth0.com/t/what-guide-should-i-follow-to-set-up-protection-to-my-django-rest-api/117310/4 "2023-10-11T22:25:43Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.