Re:Django REST framework 2.2 released
by tomchristie on Thursday February 14, 2013 @06:22AM
(#5218951)
> It seems that it's currently using a "shared secret" approach instead of supporting signed-requests, thus limiting its use to HTTPS only.
Yeah, I believe oauth1 support would address that, and is planned. :)
Overall, I found it to be quite feature-rich. One aera of improvement might be the built-in token-based authentication. It seems that it's currently using a "shared secret" approach instead of supporting signed-requests, thus limiting its use to HTTPS only.