“how can I send the token with post request to my api”
From the docs…
For clients to authenticate, the token key should be included in the Authorization HTTP header. The key should be prefixed by the string literal “Token”, with whitespace separating the two strings. For example:
Authorization: Token 9944b09199c62bcf9418ad846dd0e4bbdfc6ee4b
“at api side how can I verify if token is valid and belongs to the correct user?”
You don’t need to do anything, just access request.user to return the authenticated user – REST framework will deal with returning a ‘401 Unauthorized’ response to any incorrect authentication.