diff --git a/django/src/rendering/templates/login.html b/django/src/rendering/templates/login.html
new file mode 100644
index 00000000..093eadfe
--- /dev/null
+++ b/django/src/rendering/templates/login.html
@@ -0,0 +1,60 @@
+<h1>Login</h1>
+
+<form>
+	{% csrf_token %}
+	<div>
+		<label for="username">Username</label>
+		<input id="username" type="text" autocomplete="username" />
+	</div>
+	<div>
+		<label for="password">Password</label>
+		<input id="password" type="password" />
+	</div>
+	<button id="login-btn">Login</button>
+</form>
+
+<script>
+	function getInput(id) {
+		return document.getElementById(id).value;
+	}
+
+	function getCookie(name) {
+		let cookieValue = null;
+		if (document.cookie && document.cookie !== '') {
+			const cookies = document.cookie.split(';');
+			for (let i = 0; i < cookies.length; i++) {
+				const cookie = cookies[i].trim();
+				if (cookie.substring(0, name.length + 1) === (name + '=')) {
+					cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
+					break;
+				}
+			}
+		}
+		return cookieValue;
+	}
+
+	document.getElementById('login-btn').onclick = function(e) {
+		e.preventDefault();
+		var username = getInput('username');
+		var password = getInput('password');
+		var csrf = getCookie('csrftoken');
+
+		fetch('/api/auth/login/', {
+			method: 'POST',
+			headers: {
+				'X-CSRFToken': csrf,
+				'Content-Type': 'application/json',
+			},
+			mode: 'same-origin',
+			body: JSON.stringify({
+				username: username,
+				password: password,
+			}),
+		}).then(r => {
+			if (r.status === 200)
+				return ; // api call ok
+			else
+				return ; // api call error
+		}).catch(e => console.error(e));
+	};
+</script>