Generate a CV for this Job!

Based on your profile and this job description, you can create a tailored CV to apply directly.

Django REST API Developer Needed for Secure Token-Based Authentication (JWT/SimpleJWT)

Upwork • , US • Remote

Posted on: 29th March, 2025
Employment Type: Contractor

Job Description

We are looking for a skilled Django Backend Developer to build a secure authentication API using Django REST Framework (DRF) and token-based authentication (JWT or DRF SimpleJWT). The project involves creating endpoints for login, token validation, refresh, logout, and a protected route.

Project Requirements:

You will develop a secure RESTful API backend with the following features:

Core Functionalities:

- Token Generation: Issue token upon successful login.

- Token Validation: Middleware or decorator-based validation for protected routes.

- Token Refresh: Allow token renewal before expiry (refresh token handling).

- Token Revocation: Invalidate token on logout or when required.

- Protected Endpoint: Return a dummy payload only accessible via valid token.

Tech Stack:

- Backend: Python, Django, Django REST Framework (DRF)

- Auth: JWT or DRF SimpleJWT

- DB: SQLite (for development phase)

- Security: Password hashing, token expiration, refresh flow, blacklist support for logout

Security Expectations:

- Hashed password storage (Django default auth)

- Expiring access tokens

- Secure refresh token rotation (if using SimpleJWT)

- Blacklisting for logout/invalidation

- POST /api/login/ → Accepts username/password, returns access & refresh tokens

- POST /api/token/refresh/ → Accepts refresh token, returns new access token

- POST /api/logout/ → Invalidates tokens

- GET /api/protected/ → Only accessible with valid token

Deliverables:

- Clean Django project codebase

- REST API endpoints as described

- Postman collection for testing

Ideal Candidate:

- 2+ years of Django/DRF experience

- Experience with JWT or DRF SimpleJWT

- Strong understanding of REST API design and security practices

- Good communication & documentation skills

- Can deliver quickly with clean, maintainable code

Timeline:

Looking to get this done within 2–5 days. Please mention your availability and past work on Django Auth APIs.

Budget:

$70–100

How to Apply:

Please share:

- Your relevant Django/DRF experience

- Links to similar projects or GitHub repos

- Brief plan on how you’ll implement token revocation and refresh securely

Looking forward to building something secure and robust together!

Responsibilities

  • The project involves creating endpoints for login, token validation, refresh, logout, and a protected route
  • You will develop a secure RESTful API backend with the following features:
  • Token Generation: Issue token upon successful login
  • Token Validation: Middleware or decorator-based validation for protected routes
  • Token Refresh: Allow token renewal before expiry (refresh token handling)
  • Token Revocation: Invalidate token on logout or when required
  • Protected Endpoint: Return a dummy payload only accessible via valid token
  • Backend: Python, Django, Django REST Framework (DRF)
  • DB: SQLite (for development phase)
  • Security: Password hashing, token expiration, refresh flow, blacklist support for logout
  • Expiring access tokens
  • Secure refresh token rotation (if using SimpleJWT)
  • Blacklisting for logout/invalidation
  • POST /api/login/ → Accepts username/password, returns access & refresh tokens
  • POST /api/token/refresh/ → Accepts refresh token, returns new access token
  • POST /api/logout/ → Invalidates tokens
  • GET /api/protected/ → Only accessible with valid token
  • Clean Django project codebase
  • REST API endpoints as described
  • Postman collection for testing
  • Brief plan on how you’ll implement token revocation and refresh securely

Requirements

  • Auth: JWT or DRF SimpleJWT
  • Hashed password storage (Django default auth)
  • 2+ years of Django/DRF experience
  • Experience with JWT or DRF SimpleJWT
  • Strong understanding of REST API design and security practices
  • Good communication & documentation skills
  • Can deliver quickly with clean, maintainable code
  • Please mention your availability and past work on Django Auth APIs
  • Links to similar projects or GitHub repos
  • Looking forward to building something secure and robust together!
Upwork

Upwork

Technology

Job Type

Contractor

Benefits

  • $70–100

Loading...

Loading...

AI Cover Letter Generator

Generate a Tailored Cover Letter!

Our AI will analyze your profile and create a personalized cover letter that highlights your relevant skills and experience.

Ready to Apply?

Click the button below to start your application process.

Related Jobs

VDart Inc

2 weeks ago

CONTRACTOR

Python Developer III

ManTech

4 days ago

FULLTIME

Junior Software Developer

Virginia, US View Job