class QueryStringBasedTokenAuthentication(TokenAuthentication):

    def authenticate(self, request):
        key = request.query_params.get('auth_token').strip()
Token in query string with Django REST Framework's TokenAuthentication