We use djagno rest framework TokenAuthentication flow : https://www.django-rest-framework.org/api-guide/authentication/#tokenauthentication
However, this is a 1 token per user, no expiration protocol. There is a hack to get it expire. Eg: https://stackoverflow.com/a/15380732
Lets do it.