diff --git a/.gitignore b/.gitignore
index 82f9275..640144a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -61,6 +61,7 @@ local_settings.py
 db.sqlite3
 db.sqlite3-journal
 
+
 # Flask stuff:
 instance/
 .webassets-cache
@@ -129,6 +130,7 @@ venv/
 ENV/
 env.bak/
 venv.bak/
+myvenv/
 
 # Spyder project settings
 .spyderproject
diff --git a/myboard/manage.py b/myboard/manage.py
new file mode 100644
index 0000000..83abfb5
--- /dev/null
+++ b/myboard/manage.py
@@ -0,0 +1,22 @@
+#!/usr/bin/env python
+"""Django's command-line utility for administrative tasks."""
+import os
+import sys
+
+
+def main():
+    """Run administrative tasks."""
+    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'myboard.settings')
+    try:
+        from django.core.management import execute_from_command_line
+    except ImportError as exc:
+        raise ImportError(
+            "Couldn't import Django. Are you sure it's installed and "
+            "available on your PYTHONPATH environment variable? Did you "
+            "forget to activate a virtual environment?"
+        ) from exc
+    execute_from_command_line(sys.argv)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/myboard/media/default.jpg b/myboard/media/default.jpg
new file mode 100644
index 0000000..5fb907d
Binary files /dev/null and b/myboard/media/default.jpg differ
diff --git a/myboard/media/profile/KakaoTalk_20240705_221728306.png b/myboard/media/profile/KakaoTalk_20240705_221728306.png
new file mode 100644
index 0000000..4e27205
Binary files /dev/null and b/myboard/media/profile/KakaoTalk_20240705_221728306.png differ
diff --git a/myboard/myboard/__init__.py b/myboard/myboard/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/myboard/myboard/asgi.py b/myboard/myboard/asgi.py
new file mode 100644
index 0000000..534f9cb
--- /dev/null
+++ b/myboard/myboard/asgi.py
@@ -0,0 +1,16 @@
+"""
+ASGI config for myboard project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/5.1/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'myboard.settings')
+
+application = get_asgi_application()
diff --git a/myboard/myboard/settings.py b/myboard/myboard/settings.py
new file mode 100644
index 0000000..86c6b4d
--- /dev/null
+++ b/myboard/myboard/settings.py
@@ -0,0 +1,150 @@
+"""
+Django settings for myboard project.
+
+Generated by 'django-admin startproject' using Django 5.1.1.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/5.1/topics/settings/
+
+For the full list of settings and their values, see
+https://docs.djangoproject.com/en/5.1/ref/settings/
+"""
+import os # 이미지 처리
+from pathlib import Path
+
+# Build paths inside the project like this: BASE_DIR / 'subdir'.
+BASE_DIR = Path(__file__).resolve().parent.parent
+
+
+# Quick-start development settings - unsuitable for production
+# See https://docs.djangoproject.com/en/5.1/howto/deployment/checklist/
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = 'django-insecure-y=^tvnm166)i=4%ev&!x$gioq$!tvn=zzja@_gmmgf9=n)89+c'
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = True
+
+ALLOWED_HOSTS = []
+
+
+# Application definition
+
+INSTALLED_APPS = [
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+
+    'rest_framework',
+    'rest_framework.authtoken', # 기본 토큰 인증 방식
+    'corsheaders',
+    'django_filters',
+
+    'users',
+    'posts',
+]
+
+MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware', # 순서 중요
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_ALLOW_CREDENTIALS = True
+
+ROOT_URLCONF = 'myboard.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.debug',
+                'django.template.context_processors.request',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = 'myboard.wsgi.application'
+
+
+# Database
+# https://docs.djangoproject.com/en/5.1/ref/settings/#databases
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': BASE_DIR / 'db.sqlite3',
+    }
+}
+
+
+# Password validation
+# https://docs.djangoproject.com/en/5.1/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
+    },
+]
+
+
+# Internationalization
+# https://docs.djangoproject.com/en/5.1/topics/i18n/
+
+LANGUAGE_CODE = 'en-us'
+
+TIME_ZONE = 'Asia/Seoul'
+
+USE_I18N = True
+
+USE_TZ = True
+
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/5.1/howto/static-files/
+
+STATIC_URL = '/static/'
+MEDIA_URL = '/media/'
+MEDIA_ROOT = os.path.join(BASE_DIR, 'media')
+
+# Default primary key field type
+# https://docs.djangoproject.com/en/5.1/ref/settings/#default-auto-field
+
+DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
+
+REST_FRAMEWORK =   {
+    'DEFAULT_AUTHENTICATION_CLASSES': [
+        'rest_framework.authentication.TokenAuthentication',
+    ],
+    'DEFAULT_FILTER_BACKENDS': [
+        'django_filters.rest_framework.DjangoFilterBackend',
+    ],
+    'DEFAULT_PAGINATION_CLASS':
+    'rest_framework.pagination.PageNumberPagination',
+    'PAGE_SIZE':
+    3,
+}
\ No newline at end of file
diff --git a/myboard/myboard/urls.py b/myboard/myboard/urls.py
new file mode 100644
index 0000000..c06f649
--- /dev/null
+++ b/myboard/myboard/urls.py
@@ -0,0 +1,28 @@
+"""
+URL configuration for myboard project.
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/5.1/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  path('', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.urls import include, path
+    2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
+"""
+from django.contrib import admin
+from django.urls import path, include
+
+# media
+from django.conf import settings
+from django.conf.urls.static import static
+
+urlpatterns = [
+    path('admin/', admin.site.urls),
+    path('users/', include('users.urls')),
+    path('', include('posts.urls')),
+] + static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)
\ No newline at end of file
diff --git a/myboard/myboard/wsgi.py b/myboard/myboard/wsgi.py
new file mode 100644
index 0000000..5bba1b7
--- /dev/null
+++ b/myboard/myboard/wsgi.py
@@ -0,0 +1,16 @@
+"""
+WSGI config for myboard project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/5.1/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'myboard.settings')
+
+application = get_wsgi_application()
diff --git a/myboard/posts/__init__.py b/myboard/posts/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/myboard/posts/admin.py b/myboard/posts/admin.py
new file mode 100644
index 0000000..ea5d68b
--- /dev/null
+++ b/myboard/posts/admin.py
@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.
diff --git a/myboard/posts/apps.py b/myboard/posts/apps.py
new file mode 100644
index 0000000..da5f6c5
--- /dev/null
+++ b/myboard/posts/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class PostsConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'posts'
diff --git a/myboard/posts/migrations/0001_initial.py b/myboard/posts/migrations/0001_initial.py
new file mode 100644
index 0000000..50abd21
--- /dev/null
+++ b/myboard/posts/migrations/0001_initial.py
@@ -0,0 +1,33 @@
+# Generated by Django 5.1.1 on 2024-09-30 09:53
+
+import django.db.models.deletion
+import django.utils.timezone
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('users', '0003_alter_profile_image'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Post',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('title', models.CharField(max_length=128)),
+                ('category', models.CharField(max_length=128)),
+                ('body', models.TextField()),
+                ('image', models.ImageField(default='default.jpg', upload_to='post/')),
+                ('published_date', models.DateTimeField(default=django.utils.timezone.now)),
+                ('author', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='posts', to=settings.AUTH_USER_MODEL)),
+                ('likes', models.ManyToManyField(blank=True, related_name='like_posts', to=settings.AUTH_USER_MODEL)),
+                ('profile', models.ForeignKey(blank=True, on_delete=django.db.models.deletion.CASCADE, to='users.profile')),
+            ],
+        ),
+    ]
diff --git a/myboard/posts/migrations/0002_comment.py b/myboard/posts/migrations/0002_comment.py
new file mode 100644
index 0000000..ee9ff46
--- /dev/null
+++ b/myboard/posts/migrations/0002_comment.py
@@ -0,0 +1,27 @@
+# Generated by Django 5.1.1 on 2024-09-30 11:52
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('posts', '0001_initial'),
+        ('users', '0003_alter_profile_image'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Comment',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('text', models.TextField()),
+                ('author', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+                ('post', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='comments', to='posts.post')),
+                ('profile', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='users.profile')),
+            ],
+        ),
+    ]
diff --git a/myboard/posts/migrations/__init__.py b/myboard/posts/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/myboard/posts/models.py b/myboard/posts/models.py
new file mode 100644
index 0000000..9d157f4
--- /dev/null
+++ b/myboard/posts/models.py
@@ -0,0 +1,35 @@
+from django.db import models
+from django.contrib.auth.models import User
+from django.utils import timezone
+from users.models import Profile
+
+"""
+Post 모델 필드가 User 필드 참조 Post -> User
+Post -> User 접근 가능 ex) post.author.username
+User 모델에서 Post 참조하지 않음 그래서 User -> Post 참조 X
+ex) user.post.title >> error
+
+author 필드에서 related_name인 posts는
+view에서 역참조할 때 쓰임
+user = User.objects.get(pk=1)
+posts = user.post_set.all()
+또는 
+user = User.objects.get(pk=1)
+posts = user.posts.all()
+"""
+
+class Post(models.Model):
+    author = models.ForeignKey(User, on_delete=models.CASCADE, related_name='posts')
+    profile = models.ForeignKey(Profile, on_delete=models.CASCADE, blank=True)
+    title = models.CharField(max_length=128)
+    category = models.CharField(max_length=128)
+    body = models.TextField()
+    image = models.ImageField(upload_to='post/', default='default.jpg')
+    likes = models.ManyToManyField(User, related_name='like_posts', blank=True)
+    published_date = models.DateTimeField(default=timezone.now)
+
+class Comment(models.Model):
+    author = models.ForeignKey(User, on_delete=models.CASCADE)
+    profile = models.ForeignKey(Profile, on_delete=models.CASCADE)
+    post = models.ForeignKey(Post, related_name='comments', on_delete=models.CASCADE)
+    text = models.TextField()
\ No newline at end of file
diff --git a/myboard/posts/permissions.py b/myboard/posts/permissions.py
new file mode 100644
index 0000000..d3276f6
--- /dev/null
+++ b/myboard/posts/permissions.py
@@ -0,0 +1,12 @@
+from rest_framework import permissions
+
+class CustomReadOnly(permissions.BasePermission):
+    def has_permission(self, request, view):
+        if request.method == 'GET':
+            return True
+        return request.user.is_authenticated
+
+    def has_object_permission(self, request, view, obj):
+        if request.method in permissions.SAFE_METHODS:
+            return True
+        return obj.author == request.user
\ No newline at end of file
diff --git a/myboard/posts/serializers.py b/myboard/posts/serializers.py
new file mode 100644
index 0000000..1cd3d6a
--- /dev/null
+++ b/myboard/posts/serializers.py
@@ -0,0 +1,31 @@
+from rest_framework import serializers
+
+from users.serializers import ProfileSerializer
+from .models import *
+
+class CommentSerializer(serializers.ModelSerializer):
+    profile = ProfileSerializer(read_only=True)
+
+    class Meta:
+        model = Comment
+        fields = ("pk", "profile", "post", "text")
+
+
+class CommentCreateSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Comment
+        fields = ("post", "text")
+
+class PostSerializer(serializers.ModelSerializer):
+    profile = ProfileSerializer(read_only=True)
+    comments = CommentSerializer(many=True, read_only=True)
+
+    class Meta:
+        model = Post
+        fields = ("pk", "profile", "title", "body", "image", "published_date", "likes", "comments")
+
+class PostCreateSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Post
+        fields = ("title", "category", "body", "image")
+
diff --git a/myboard/posts/tests.py b/myboard/posts/tests.py
new file mode 100644
index 0000000..de8bdc0
--- /dev/null
+++ b/myboard/posts/tests.py
@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.
diff --git a/myboard/posts/urls.py b/myboard/posts/urls.py
new file mode 100644
index 0000000..6ba4712
--- /dev/null
+++ b/myboard/posts/urls.py
@@ -0,0 +1,12 @@
+from django.urls import path
+from rest_framework import routers
+
+from .views import *
+
+router = routers.SimpleRouter()
+router.register('posts', PostViewSet)
+router.register('comments', CommentViewSet)
+
+urlpatterns = router.urls + [
+    path('like/<int:pk>/', like_post, name='like_post')
+]
\ No newline at end of file
diff --git a/myboard/posts/views.py b/myboard/posts/views.py
new file mode 100644
index 0000000..7f6235a
--- /dev/null
+++ b/myboard/posts/views.py
@@ -0,0 +1,50 @@
+from rest_framework import viewsets
+from django_filters.rest_framework import DjangoFilterBackend
+from rest_framework.decorators import api_view, permission_classes
+from rest_framework.generics import get_object_or_404
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+
+from users.models import Profile
+from .models import *
+from .permissions import *
+from .serializers import *
+
+class PostViewSet(viewsets.ModelViewSet):
+    queryset = Post.objects.all()
+    permission_classes = [CustomReadOnly]
+    filter_backends = [DjangoFilterBackend]
+    filterset_fields = ['author', 'likes']
+
+    def get_serializer_class(self):
+        if self.action == 'list' or 'retrieve':
+            return PostSerializer
+        return PostCreateSerializer
+
+    def perform_create(self, serializer):
+        profile = Profile.objects.get(user=self.request.user)
+        serializer.save(author=self.request.user, profile=profile)
+
+@api_view(['GET'])
+@permission_classes([IsAuthenticated])
+def like_post(request, pk):
+    post = get_object_or_404(Post, pk=pk)
+    if request.user in post.likes.all():
+        post.likes.remove(request.user)
+    else:
+        post.likes.add(request.user)
+
+    return Response({'status': 'ok'})
+
+class CommentViewSet(viewsets.ModelViewSet):
+    queryset = Comment.objects.all()
+    permission_classes = [CustomReadOnly]
+
+    def get_serializer_class(self):
+        if self.action == 'list' or 'retrieve':
+            return CommentSerializer
+        return CommentCreateSerializer
+
+    def perform_create(self, serializer):
+        profile = Profile.objects.get(user=self.request.user)
+        serializer.save(author=self.request.user, profile=profile)
\ No newline at end of file
diff --git a/myboard/users/__init__.py b/myboard/users/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/myboard/users/admin.py b/myboard/users/admin.py
new file mode 100644
index 0000000..0df02ca
--- /dev/null
+++ b/myboard/users/admin.py
@@ -0,0 +1,24 @@
+from django.contrib import admin
+from django.contrib.auth.admin import UserAdmin as BaseUserAdmin
+from django.contrib.auth.models import User
+from .models import Profile
+
+class ProfileInline(admin.StackedInline):
+    model = Profile
+    can_delete = False
+    verbose_name_plural = "profile"
+
+class UserAdmin(BaseUserAdmin):
+    inlines = (ProfileInline, )
+
+    # list_display에 커스텀 필드 추가
+    list_display = ('custom_user_display', 'email', 'first_name', 'last_name', 'is_staff')
+
+    # 커스텀 메서드로 pk와 username 출력
+    def custom_user_display(self, obj):
+        return f'[{obj.pk}] {obj.username}'
+
+    custom_user_display.short_description = 'User'  # 어드민에서의 컬럼 이름
+
+admin.site.unregister(User)
+admin.site.register(User, UserAdmin)
\ No newline at end of file
diff --git a/myboard/users/apps.py b/myboard/users/apps.py
new file mode 100644
index 0000000..8063856
--- /dev/null
+++ b/myboard/users/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class UsersConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'users'
diff --git a/myboard/users/migrations/0001_initial.py b/myboard/users/migrations/0001_initial.py
new file mode 100644
index 0000000..da6fd87
--- /dev/null
+++ b/myboard/users/migrations/0001_initial.py
@@ -0,0 +1,27 @@
+# Generated by Django 5.1.1 on 2024-09-23 14:22
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('auth', '0012_alter_user_first_name_max_length'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Profile',
+            fields=[
+                ('user', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, primary_key=True, serialize=False, to=settings.AUTH_USER_MODEL)),
+                ('nickname', models.CharField(max_length=128)),
+                ('position', models.CharField(max_length=128)),
+                ('subjects', models.CharField(max_length=128)),
+                ('image', models.ImageField(default='default.jpg', upload_to='profile/')),
+            ],
+        ),
+    ]
diff --git a/myboard/users/migrations/0002_alter_profile_image.py b/myboard/users/migrations/0002_alter_profile_image.py
new file mode 100644
index 0000000..b71cb43
--- /dev/null
+++ b/myboard/users/migrations/0002_alter_profile_image.py
@@ -0,0 +1,18 @@
+# Generated by Django 5.1.1 on 2024-09-23 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('users', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='profile',
+            name='image',
+            field=models.ImageField(default='default.jpeg', upload_to='profile/'),
+        ),
+    ]
diff --git a/myboard/users/migrations/0003_alter_profile_image.py b/myboard/users/migrations/0003_alter_profile_image.py
new file mode 100644
index 0000000..7270177
--- /dev/null
+++ b/myboard/users/migrations/0003_alter_profile_image.py
@@ -0,0 +1,18 @@
+# Generated by Django 5.1.1 on 2024-09-23 15:07
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('users', '0002_alter_profile_image'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='profile',
+            name='image',
+            field=models.ImageField(default='default.jpg', upload_to='profile/'),
+        ),
+    ]
diff --git a/myboard/users/migrations/__init__.py b/myboard/users/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/myboard/users/models.py b/myboard/users/models.py
new file mode 100644
index 0000000..c272a98
--- /dev/null
+++ b/myboard/users/models.py
@@ -0,0 +1,16 @@
+from django.db import models
+from django.contrib.auth.models import User
+from django.db.models.signals import post_save
+from django.dispatch import receiver
+
+class Profile(models.Model):
+    user = models.OneToOneField(User, on_delete=models.CASCADE, primary_key=True)
+    nickname = models.CharField(max_length=128)
+    position = models.CharField(max_length=128)
+    subjects = models.CharField(max_length=128)
+    image = models.ImageField(upload_to='profile/', default='default.jpg')
+
+@receiver(post_save, sender=User)
+def create_user_profile(sender, instance, created, **kwargs):
+    if created:
+        Profile.objects.create(user=instance)
\ No newline at end of file
diff --git a/myboard/users/permissions.py b/myboard/users/permissions.py
new file mode 100644
index 0000000..9e17710
--- /dev/null
+++ b/myboard/users/permissions.py
@@ -0,0 +1,7 @@
+from rest_framework import permissions
+
+class CustomReadOnly(permissions.BasePermission):
+    def has_object_permission(self, request, view, obj):
+        if request.method in permissions.SAFE_METHODS:
+            return True
+        return obj.user == request.user
\ No newline at end of file
diff --git a/myboard/users/serializers.py b/myboard/users/serializers.py
new file mode 100644
index 0000000..97c0361
--- /dev/null
+++ b/myboard/users/serializers.py
@@ -0,0 +1,56 @@
+from django.contrib.auth.models import User 
+from django.contrib.auth.password_validation import validate_password # 기본 패스워드 검증 도구
+from rest_framework import serializers
+from rest_framework.authtoken.models import Token
+from rest_framework.validators import UniqueValidator # 이메일 중복 방지를 위한 검증 도구
+from django.contrib.auth import authenticate # 유저 인증
+from .models import Profile
+
+class RegisterSerializer(serializers.ModelSerializer):
+    email = serializers.EmailField(
+        required=True,
+        validators=[UniqueValidator(queryset=User.objects.all())],
+    )
+    password = serializers.CharField(
+        write_only=True,
+        required=True,
+        validators=[validate_password],
+    )
+    password2 = serializers.CharField(write_only=True, required=True)
+
+    class Meta:
+        model = User
+        fields = ('username', 'password', 'password2', 'email')
+
+    def validate(self, data):
+        if data['password'] != data['password2']:
+            raise serializers.ValidationError({"password": "Password fields didn't match."})
+        return data
+
+    def create(self, validated_data):
+        user = User.objects.create_user(
+            username=validated_data['username'],
+            email=validated_data['email'],
+        )
+
+        user.set_password(validated_data['password'])
+        user.save()
+        token = Token.objects.create(user=user)
+        return user
+
+class LoginSerializer(serializers.Serializer):
+    username = serializers.CharField(required=True)
+    password = serializers.CharField(required=True, write_only=True)
+    # write_only옵션으로 클라이언트->서버 방향의 역직렬화만 가능하게
+
+    def validate(self, data):
+        user = authenticate(**data)
+        if user:
+            token = Token.objects.get(user=user)
+            return token
+        raise serializers.ValidationError({"error": "Unable to log in with provided credentials."})
+
+class ProfileSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Profile
+        fields = ("nickname", "position", "subjects", "image")
\ No newline at end of file
diff --git a/myboard/users/tests.py b/myboard/users/tests.py
new file mode 100644
index 0000000..de8bdc0
--- /dev/null
+++ b/myboard/users/tests.py
@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.
diff --git a/myboard/users/urls.py b/myboard/users/urls.py
new file mode 100644
index 0000000..f2eaba0
--- /dev/null
+++ b/myboard/users/urls.py
@@ -0,0 +1,9 @@
+from django.urls import path
+from .views import *
+
+urlpatterns = [
+    path('register/', RegisterView.as_view()),
+    path('login/', LoginView.as_view()),
+    path('profile/<int:pk>/', ProfileView.as_view()),
+
+]
diff --git a/myboard/users/views.py b/myboard/users/views.py
new file mode 100644
index 0000000..c57aaa7
--- /dev/null
+++ b/myboard/users/views.py
@@ -0,0 +1,22 @@
+from django.contrib.auth.models import User
+from rest_framework import generics, status
+from rest_framework.response import Response
+from .serializers import *
+from .models import *
+
+class RegisterView(generics.CreateAPIView):
+    queryset = User.objects.all()
+    serializer_class = RegisterSerializer
+
+class LoginView(generics.GenericAPIView):
+    serializer_class = LoginSerializer
+
+    def post(self, request):
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        token = serializer.validated_data # validate()의 리턴값인 Token을 받아옴.
+        return Response({"token": token.key}, status=status.HTTP_200_OK)
+
+class ProfileView(generics.RetrieveUpdateAPIView):
+    queryset = Profile.objects.all()
+    serializer_class = ProfileSerializer
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..770647f
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,8 @@
+asgiref==3.8.1
+Django==5.1.1
+django-cors-headers==4.4.0
+django-filter==24.3
+djangorestframework==3.15.2
+pillow==10.4.0
+sqlparse==0.5.1
+tzdata==2024.1