500 error on demo site

[itbabu]

Hi
I was playing with your demo.

If I do a POST directly to the auth endpoint I get a 500.

http://54.186.139.158/api/auth/

A check before call login() should be enough.

class AuthView(APIView):
    authentication_classes = (authenticators.QuietBasicAuthentication,)

    def post(self, request, *args, **kwargs):
        if request.user.is_anonymous():
            return HttpResponseBadRequest()
        login(request, request.user)
        return Response(serializers.UserSerializer(request.user).data)

I don't see how a not "malicious" user should get to that point and be anonymous.
If I'm wrong... something different than a 400 error should be given to the user.

[richtier]

Hi, thanks for raising this. Please make a pull request and I will merge.