Authentication with REST Framework Django

Question

I'm new to Django and curious how the authentication of Rest Framework works.

So as I understand, the flow of authentication is: Frontend sends request with username and password > Backend (Django) sends back token > From then on frontend send this token in header to authenticate.

But because anyone can see the header I send, so how is this safe?

Answer 1

For this to be secure you should only ever authenticate over an https connection. When using an https connection the header/token/cookie/whatever will be encrypted.