Django, API, REST, Authentication. of the view, before the permission and throttling checks occur, and before any other code is allowed to proceed. BasicAuthentication) permission_classes = (IsAuthenticated,) def get(self, request, format=None): HTTP 403 responses do not include the WWW-Authenticate header..