[Answered ]-TastyPie authentication for pure javascript site

will see basic read only info from the Django API.

It sounds like you probably just want to make those bits of the API publicly available for read-only access, and then not use any authentication method.

As you say attempting to hide a key isn’t a sensible way to go, and if there’s no kind of user login then you can’t really authenticate in any secure way.