drf-jwt
JSON Web Token based authentication for Django REST framework
Decision gist · record as of 2026-08-14
Yes, with caution. The package is stable and low-friction to install, but it has been dormant since early 2022 with no active maintenance. Use it if your project is on a stable Django/DRF version and you do not expect frequent framework upgrades. For new projects or those requiring ongoing security patches, consider whether a more actively maintained alternative better fits your risk tolerance.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Django 1.11+, Django REST Framework 3.7+, and PyJWT as runtime dependencies.
- Low install friction with a pure-Python wheel.
- Maintenance is dormant: last commit was 2023-10-13 and no release since 2022-01-09, so expect no active bug fixes or security patches going forward.
License · maintenance · safety
MIT (permissive) — MIT license is permissive—you can use, modify, and distribute this package freely in commercial and open-source projects with minimal restrictions.
last release 2022-01-09 (1678 days) · last repo commit 2023-10-13 · 192 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 583,190 downloads/mo, #5,896 on PyPI
Alternatives
Verify before relying
pip install drf-jwt
from drf_jwt import views, authentication
# Configure in Django REST Framework settings with JSONWebTokenAuthentication- Whether the package remains compatible with modern Django and DRF versions released after 2022.
- Security implications of using an unmaintained JWT library in production systems.
- Whether PyJWT dependency updates are automatically picked up or if pinned versions create compatibility gaps.
- Specific configuration steps and available authentication classes in the current API.
What it is and what it does
drf-jwt is a Django REST Framework authentication backend that implements JWT (JSON Web Token) authentication. It sits between your REST API and PyJWT, providing a Django-friendly interface to issue and validate bearer tokens without server-side session storage. You configure it in your DRF settings, and it handles token generation and validates incoming requests by checking the Authorization header.
The package is designed for stateless API authentication—clients exchange credentials once for a token, then include that token in subsequent requests. It depends on Django, Django REST Framework, and PyJWT to function. The library itself is marked as Production/Stable, but development has stalled since early 2022, meaning no new features or security patches are being released.
Use it for
- Building a REST API where clients authenticate once and use a token for multiple requests without server-side session overhead.
- Creating a mobile or single-page app backend that issues JWT tokens at login and validates them on protected endpoints.
- Implementing stateless microservice authentication where each service validates tokens independently without a shared session store.
- Adding JWT support to an existing Django REST Framework project that currently lacks token-based authentication.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, with caution.
The package is stable and low-friction to install, but it has been dormant since early 2022 with no active maintenance. Use it if your project is on a stable Django/DRF version and you do not expect frequent framework upgrades. For new projects or those requiring ongoing security patches, consider whether a more actively maintained alternative better fits your risk tolerance.
Install
drf-jwt on PyPI
Before you install
Low install friction with a pure-Python wheel. Maintenance is dormant: last commit was 2023-10-13 and no release since 2022-01-09, so expect no active bug fixes or security patches going forward.
Requires Django 1.11+, Django REST Framework 3.7+, and PyJWT as runtime dependencies.
License in practice
MIT license is permissive—you can use, modify, and distribute this package freely in commercial and open-source projects with minimal restrictions.
Quickstart
pip install drf-jwt
from drf_jwt import views, authentication
# Configure in Django REST Framework settings with JSONWebTokenAuthenticationVerify before relying
- Whether the package remains compatible with modern Django and DRF versions released after 2022.
- Security implications of using an unmaintained JWT library in production systems.
- Whether PyJWT dependency updates are automatically picked up or if pinned versions create compatibility gaps.
- Specific configuration steps and available authentication classes in the current API.
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release !=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,>=2.7 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 3 packagesPyJWTDjangodjangorestframework |
| Maintenance | Dormant 1,678 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 583,190 / month, #5,896 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableEnvironment :: Web EnvironmentFramework :: DjangoIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: PythonProgramming Language :: Python :: 2Programming Language :: Python :: 2.7Programming Language :: Python :: 3Programming Language :: Python :: 3.5Programming Language :: Python :: 3.6Programming Language :: Python :: 3.7Topic :: Internet :: WWW/HTTP |
Evidence: drf_jwt-1.19.2-py2.py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “json web token django api”
- drf-jwtAdds JSON Web Token (JWT) authentication to Django REST Framework…
- djangorestframework-simplejwtProvides JSON Web Token (JWT) authentication for Django REST…
- djangorestframework-jwtAdds JSON Web Token (JWT) authentication support to Django REST…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also django-rest-knox · djangorestframework-jwt · taktile-auth · zi-api-auth-client · djangorestframework-simplejwt · edx-drf-extensions · dj-rest-auth · django-graphql-jwt · django-ninja-jwt · django-sesame