djangorestframework-jwt
JSON Web Token based authentication for Django REST framework
Decision gist · record as of 2026-08-14
No. This package is abandoned (latest release 2017-06-23, repository archived) and unsupported for modern Django and Python versions. Security patches are unlikely, and compatibility with current tooling is not guaranteed. For new projects or modern stacks, use an actively maintained JWT authentication package. For legacy systems still on the supported versions, evaluate whether upgrading is feasible before committing to this unmaintained dependency.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Django (1.8, 1.9, 1.10, 1.11) and Django REST Framework (3.0, 3.1, 3.2, 3.3, 3.4, 3.5); compatibility with modern versions is not guaranteed.
- Installation is straightforward with no runtime dependencies, but the package is abandoned as of the latest release in 2017 with no updates since.
- The repository is archived and no longer maintained, which poses a significant risk for security patches or compatibility with modern versions.
License · maintenance · safety
MIT (permissive) — Licensed under MIT (permissive), so you can use, modify, and distribute it freely with minimal restrictions, though you must retain the license notice.
last release 2017-06-23 (3339 days) · last repo commit 2022-12-06 · 3,167 stars · archived
0 known vulnerabilities (OSV.dev, 2026-08-14) · 230,199 downloads/mo, #9,115 on PyPI
Alternatives
Verify before relying
pip install djangorestframework-jwt
from djangorestframework_jwt.views import obtain_jwt_token
# Add to Django URL configuration
urlpatterns = [
path('api-token-auth/', obtain_jwt_token),
]- Whether this package works with Django versions beyond 1.11 and Python versions beyond 3.5.
- Security implications of using an abandoned package in production environments.
- Whether the package has been superseded by an actively maintained alternative.
What it is and what it does
This package integrates JWT-based authentication into Django REST Framework, allowing you to issue and validate JSON Web Tokens for stateless API authentication. Instead of session-based auth, clients receive a token on login and include it in subsequent requests, making it suitable for mobile apps, single-page applications, and microservices.
The package was last released on 2017-06-23 and is now archived. It was designed for Django 1.8, 1.9, 1.10, 1.11 and Django REST Framework 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, supporting Python 2.7, 3.3, 3.4, 3.5. No runtime dependencies means easy installation, but the lack of maintenance since the latest release raises concerns about security vulnerabilities and compatibility with modern tooling.
Use it for
- Adding JWT authentication to a legacy Django REST Framework API built before 2017.
- Issuing bearer tokens to mobile or web clients that need stateless authentication without sessions.
- Implementing token refresh and expiration logic for time-limited API access in older Django projects.
- Migrating from session-based to token-based authentication in a Django REST Framework application.
- Securing API endpoints with JWT validation in a microservices architecture using older Django versions.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No.
This package is abandoned (latest release 2017-06-23, repository archived) and unsupported for modern Django and Python versions. Security patches are unlikely, and compatibility with current tooling is not guaranteed. For new projects or modern stacks, use an actively maintained JWT authentication package. For legacy systems still on the supported versions, evaluate whether upgrading is feasible before committing to this unmaintained dependency.
Install
djangorestframework-jwt on PyPI
Before you install
Installation is straightforward with no runtime dependencies, but the package is abandoned as of the latest release in 2017 with no updates since. The repository is archived and no longer maintained, which poses a significant risk for security patches or compatibility with modern versions.
Requires Django (1.8, 1.9, 1.10, 1.11) and Django REST Framework (3.0, 3.1, 3.2, 3.3, 3.4, 3.5); compatibility with modern versions is not guaranteed.
License in practice
Licensed under MIT (permissive), so you can use, modify, and distribute it freely with minimal restrictions, though you must retain the license notice.
Quickstart
pip install djangorestframework-jwt
from djangorestframework_jwt.views import obtain_jwt_token
# Add to Django URL configuration
urlpatterns = [
path('api-token-auth/', obtain_jwt_token),
]Verify before relying
- Whether this package works with Django versions beyond 1.11 and Python versions beyond 3.5.
- Security implications of using an abandoned package in production environments.
- Whether the package has been superseded by an actively maintained alternative.
Package facts
| License | MIT permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | None |
| Maintenance | Abandoned 3,339 days since the last release |
| Last repo commit | repository archived |
| First released | |
| Downloads | 230,199 / month, #9,115 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableEnvironment :: Web EnvironmentFramework :: DjangoIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: PythonProgramming Language :: Python :: 2Programming Language :: Python :: 2.7Programming Language :: Python :: 3Programming Language :: Python :: 3.3Programming Language :: Python :: 3.4Programming Language :: Python :: 3.5Topic :: Internet :: WWW/HTTP |
Evidence: djangorestframework_jwt-1.11.0-py2.py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “jwt authentication django rest framework”
- djangorestframework-jwtAdds JSON Web Token (JWT) authentication support to Django REST…
- drf-jwtAdds JSON Web Token (JWT) authentication to Django REST Framework…
- edx-drf-extensionsProvides JWT authentication, CSRF token endpoints, and cross-cutting…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also drf-jwt · djangorestframework-simplejwt · dj-rest-auth · zi-api-auth-client · gotrue · Flask-JWT-Extended · taktile-auth · atlassian-jwt-auth · supertokens-python · PyJWT