You can now log in to the website by sending a POST request to /api_login/, and then using that token while getting /api/balance or /api/images

reValuate/api/views.py

@@ -1,15 +1,23 @@
-from rest_framework import status, viewsets
-from rest_framework.decorators import api_view
+from rest_framework import status, viewsets, authentication, permissions
+from rest_framework.decorators import api_view, action
 from rest_framework.response import Response
+
 from users.models import Balance
 from upload.models import Media
 from .serializers import BalanceSerializer, ImageSerializer
 
 class BalanceView(viewsets.ModelViewSet):
-    queryset = Balance.objects.all()
+    permission_classes = [permissions.IsAuthenticated]
     serializer_class = BalanceSerializer
 
-class ImageView(viewsets.ModelViewSet):
-    queryset = Media.objects.all()
-    serializer_class = ImageSerializer
+    def get_queryset(self):
+        return Balance.objects.filter(user=self.request.user)
+    
 
+class ImageView(viewsets.ModelViewSet):
+    permission_classes = [permissions.IsAuthenticated]
+    serializer_class = ImageSerializer
+    
+    def get_queryset(self):
+        return Media.objects.filter(user=self.request.user)
+