[Answered ]-Security best practices for a public POST URL

Tbh I wouldn’t bother reinventing the wheel, have a look at django-tastypie which implements a few good ways achieving REST calls. It ships with django and api key authentication (and a few more) and lets you add custom authentication behaviour