Write your own permissions, like this:

def permission_valid_token(func):
    # first arg is the viewset, second is the request
    def wrapper(*args, **kwargs):
        valid_token, user_token = test_token_authorization(args[1].headers) # my function to validate the user
        if not valid_token:
            return Response(status=status.HTTP_401_UNAUTHORIZED)
        return func(*args, **kwargs)
    return wrapper

This is a permission that i'm using in app, probably you will have to change the valid_token part

And them you import in your views

from file_that_you_use.permissions import permission_valid_token

And you use as a decorator

class WeatherViewSet(viewsets.ViewSet):
    @permission_valid_token
    def list(self, request):

This is just a viewset for example, you can use generic viewsets or whatever you want.

If you are using VSCode, hover over @permission_classes([IsAdminUser]), click on Command (on your keyboard).

You can see what happens behind the scenes, play and create your custom Django version (not recommended) or you can overwrite the function.