title: Securing Django OAuth Toolkit Views
body: <p>We're looking to implement Django OAuth on our backend in order to integrate Alexa and other 3rd party APIs. We've been following the tutorials on their site (<a href="http://django-oauth-toolkit.readthedocs.io/en/latest/tutorial/tutorial.html" rel="noreferrer">http://django-oauth-toolkit.readthedocs.io/en/latest/tutorial/tutorial.html</a>), but have run into a security question that has so far escaped us:</p>
  
  <p>Is there a security concern that any user can access <code>https://&lt;oursite.com&gt;/o/applications</code>? If so, what steps need to be taken to prevent users from accessing these views?</p>
  
  <p>The only relevant questions on SO weren't particularly helpful:</p>
  
  <p><a href="https://stackoverflow.com/questions/24862761/secure-creation-of-new-applications-in-django-oauth-toolkit">Secure creation of new applications in Django OAuth Toolkit</a></p>
  
  <p><a href="https://stackoverflow.com/questions/34959031/disable-or-restrict-o-applications-django-rest-framework-oauth2?rq=1">Disable or restrict /o/applications (django rest framework, oauth2)</a></p>