Authentication class, permission class

Also written: authentication class, permission class, permission_classes

In DRF, an authentication class works out who is making the request (cookie, token). A permission class then decides whether that user may do it.