YOU’RE LEARNING TO↗learner can distinguish between authentication and authorization in DRF
↗learner can configure Session, Token, and JWT (simplejwt) authentication
↗learner can apply built-in permission classes (IsAuthenticated, IsAdminUser, AllowAny)
↗learner can write a custom permission class
↗learner can configure throttling to rate-limit endpoints
↗learner can apply auth and permission at the view level vs globally