Which is the best way to protect a Django API?

Question

I\'ve deployed a Django API powered with Django Rest Framework with some open endpoints and some Authenticated endpoints using Token authentication.

Which is the best