Authentication can be set for an specific APIView endpoint, by using the authentication_classes variable:
from rest_framework.authentication import SessionAuthentication, BasicAuthentication
from rest_framework.permissions import IsAuthenticated
from rest_framework.response import Response
...
