Log in

Email + password

How it works

Frontend -> Next -> Django

  1. Email login calls POST /api/auth/token on Next.js (no CORS).
  2. Next.js calls Django POST /api/auth/token/ and stores the DRF token in an HttpOnly cookie.
  3. For Google, the backend exposes POST /api/auth/google/ which exchanges an OAuth code (or verifies an ID token) and returns a DRF token.