Currently squash-api has a basic http authentication through Django DRF and supports only an Admin user.

With squash-restful-api we moved to a flask based implementation and we want to support multiple users and authenticate with github oauth 2.0 provider .

This blog post from Miguel Grinberg seems to be an excellent start:

https://blog.miguelgrinberg.com/post/oauth-authentication-with-flask