There is no clearly documented way to manually validate an API key about djangorestframework-api-key HOT 2 CLOSED

Hi @jabelone,

That’s right, you should use the manager’s is_valid() method, essentially reproducing the code from the permission class. Actually, would it make sense for you to reuse the permission class? I don’t know about Django channels + permissions but if there’s a permission mechanism provided by Django channels, you might as well use it.

The is_valid() method on model instances only checks for hash-to-hash validity, and it gets called by the manager method (I’d agree they could have been called different names).

from djangorestframework-api-key.

That’s right, you should use the manager’s is_valid() method

Great, thanks for confirming! It doesn't look like there's anything supported by channels straight out of the box, so I'll just validate it in the Channels JsonWebsocketConsumer connect() handler for now.

The is_valid() method on model instances only checks for hash-to-hash validity

Ah that makes sense, I've included a note about that in the documentation PR so people don't get confused.

from djangorestframework-api-key.