Token authentication should allow logged-in users from taking advantage of the browsable API feature by checking if the user is logged-in. In that case, get or create the token and let the logged in user pass through the process

rest_framework/authentication.py

@@ -150,6 +150,16 @@ class TokenAuthentication(BaseAuthentication):
     """
 
     def authenticate(self, request):
+        # Get the underlying HttpRequest object
+        request = request._request
+        user = getattr(request, 'user', None)
+
+        # If we have a logged-in user, skip checking and let the user pass
+        if user and user.is_active:
+            token = self.model.objects.get_or_create(user=user)[0]
+
+            return (user, token)
+            
         auth = get_authorization_header(request).split()
 
         if not auth or auth[0].lower() != b'token':