// the find
RealmTeam/django-rest-framework-social-oauth2
python-social-auth and oauth2 support for django-rest-framework
A thin glue layer between python-social-auth, django-oauth-toolkit, and Django REST Framework that lets you exchange third-party tokens (Facebook, Google, etc.) for your own OAuth2 tokens. The maintainers have deprecated it and explicitly point users to django-allauth. Do not start a new project on this.
The token-exchange pattern (convert_token grant type) is genuinely useful and not something django-oauth-toolkit does out of the box. The curl examples in the README are clear and actually runnable. It kept the surface area small — the whole package is about 8 files, so there's not much to go wrong.
Deprecated and unmaintained — the README opens with a warning to use something else, which is the only honest thing to do. Still references Django 1.8 as if it's news. Uses the Resource Owner Password Credentials grant, which OAuth 2.1 dropped entirely because it's a security antipattern. No tests in the visible tree.