# move the authentication system

**URL:** <https://forum.djangoproject.com/t/move-the-authentication-system/4348>\
**Category:** Using Django\
**Created:** [September 15, 2020, 1:58am UTC](https://forum.djangoproject.com/t/move-the-authentication-system/4348 "2020-09-15T01:58:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![groovejumat](https://avatars.discourse-cdn.com/v4/letter/g/2acd7d/32.png) [@groovejumat](https://forum.djangoproject.com/u/groovejumat)\
**Post date:** [September 15, 2020, 1:58am UTC](https://forum.djangoproject.com/t/move-the-authentication-system/4348/1 "2020-09-15T01:58:50Z")

</div>

We are going to move the authentication system and users to a central authentication server.

Currently, the central authentication server is a django server with jwt.

The server that is trying to move the authentication system uses basic authentication system.

I couldn’t find a good reference on how to move to the central certification system. If there is a way to move it, please tell me the direction.

---

<div class="post-metadata">

**Author:** ![KenWhitesell](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/kenwhitesell/32/280_2.png) [@KenWhitesell](https://forum.djangoproject.com/u/KenWhitesell)\
**Post date:** [September 15, 2020, 3:59am UTC](https://forum.djangoproject.com/t/move-the-authentication-system/4348/2 "2020-09-15T03:59:59Z")

</div>

You don’t mention which jwt authentication server you’re using. I would think that the process of authenticating through a remote server may depend upon the implementation. (I don’t personally know that one way or the other, we don’t use jwt.)

Checking [djangopackages.org](http://djangopackages.org) I see six listed there - there may be others.

Just picking one as an example, [django-rest-framework-jwt](https://jpadilla.github.io/django-rest-framework-jwt/), they have a section in the docs, Verify Token, which shows how a remote-to-the-authentication-service service can verify that a token is valid.  
If that’s the package you’re using, great! If not, it might give you some ideas of what to look for in your package.