If you don't want to write ANY custom code then you probably cannot do it. I've never written any site without at least some custom code.
At a minimum, you will probably need some custom permission classes that you would set on the views--this keeps people with different roles out of stuff they shouldn't be in.
You need to use some sort of token system either OAuth2 (better--more flexible) or the one built into DRF for communication between the frontend and backend. This is usually non-trivial.
Think about what you are asking and you will see it takes work and customization is always part of it.
~Carl
-------------------------------------------------------------------------------
Carl J. Nobile (Software Engineer)
carl....@gmail.com-------------------------------------------------------------------------------