I use Django with Django Rest Framework as the backend for my site. Registration is disabled, and login with password is disabled. The only way a user can register and login is with Django Social Auth, that exchanges (in this case Discord) a social token for a Django token, and in that process the user is created if they don't exist for that email.
So in Django, the user exists, with a username and email, but they don't have a password.
How can these users login to the admin panel?
Registration is disabled, and login with password is disabled.
Registration is not the only way of creating users. You can create superuser using createsuperuser shell command. Then you can use it to login into admin site.
Now, the question is if you want to allow all users to admin site. IMHO, you should not. Still, if you want to then you can add a custom auth backend, like this:
class CustomBackend(BaseBackend): def authenticate(self, request, username=None, token=None): try: user = User.objects.get(username=username) except User.DoesNotExist: return None check_token = Token.objects.filter(user=user, token=token).exists() if check_token: return user return None def get_user(self, user_id): try: return User.objects.get(pk=user_id) except User.DoesNotExist: return None And add the new backend in settings.py:
AUTHENTICATION_BACKENDS = ['django.contrib.auth.backends.ModelBackend', 'path.to.CustomBackend'] 
token=password, allowing them to input their token into the password field.
