Domains rest API does not require any authentication but it should be protected and restricted to the django admin user.