rest_framework_authtoken.py

from django.contrib.auth import login, logout
from rest_framework import viewsets, permissions, status, views
from rest_framework.authtoken.serializers import AuthTokenSerializer
from rest_framework.authtoken.views import ObtainAuthToken
from rest_framework.response import Response


class LoginView(viewsets.ViewSet):
    serializer_class = AuthTokenSerializer
    permission_classes = [permissions.AllowAny]

    def create(self, request):
        return ObtainAuthToken().post(request)


class LogoutView(viewsets.ViewSet):
    permission_classes = [permissions.AllowAny]

    def get(self, request, format=None):
        request.user.auth_token.delete()
        return Response(status=status.HTTP_200_OK)


class AuthLoginView(views.APIView):
    def post(self, request):
        serializer = AuthTokenSerializer(data=request.data)
        serializer.is_valid(raise_exception=True)
        user = serializer.validated_data['user']
        login(request, user)
        return Response({
            'detail': 'Session login successful.'
        })


class AuthLogoutView(views.APIView):
    def get(self, request):
        logout(request)
        return Response({
            'detail': 'Session logout successful.'
        })