title: User Authentication in Django REST Framework
body: <p>I have a Django REST backend, and it has a <code>/users</code> endpoint where I can add new users through <code>POST</code> method from frontend.</p>
  
  <p><code>/users</code> endpoint url:</p>
  
  <p><code>http://192.168.201.211:8024/users/</code></p>
  
  <p>In this endpoint I can view all users information and add new user, so I must avoid others entry it except Administrator. I create a superuser <code>admin</code> with password <code>admin123</code> by <code>python manage.py createsuperuser</code>.</p>
  
  <p>My question is, If I want to do a HTTP <code>POST</code> from frontend(I use Angular) I have to pass the Administrator's user name and password, <code>admin</code> and <code>admin123</code>, along with <code>POST</code> head information. So I let others know the user name and password who check the source code of frontend. </p>
  
  <p>Is there any other way to do this <code>Authentication</code> without exposing Administrator's user name and password to others?</p>