TokenAuthentication class, this is used to verify the token

auth.py

import json

from django.contrib.auth.models import User
from rest_framework.authentication import BaseAuthentication

from pamoja_admin.shared.auth.enc_dec import decrypt


class TokenAuthentication(BaseAuthentication):
    def authenticate(self, request):
        headers = request.headers

        token: str = headers.get('authorization', None)

        if token is None:
            return {}, None

        token = token.split(' ')[1]
        # try decrypting the token's second part
        decrypted_token = decrypt(token)

        # json load from the decrypted_token
        user_profile = json.loads(decrypted_token)

        # user id is in the user_profile dictionary
        user = User.objects.get(id=user_profile['id'])

        return user, None