permissions.py

from django.conf import settings

from rest_framework.permissions import BasePermission


class ConditionalAuthentication(BasePermission):

    def has_permission(self, request, view):
        if settings.API_AUTHENTICATION_REQUIRED:
            return request.user and request.user.is_authenticated()
        return True