Module supertokens_python.recipe.jwt.recipe_implementation
Expand source code
# Copyright (c) 2021, VRAI Labs and/or its affiliates. All rights reserved.
#
# This software is licensed under the Apache License, Version 2.0 (the
# "License") as published by the Apache Software Foundation.
#
# You may not use this file except in compliance with the License. You may
# obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
from __future__ import annotations
from typing import TYPE_CHECKING, Any, Dict, List, Union, Optional
from supertokens_python.normalised_url_path import NormalisedURLPath
from supertokens_python.querier import Querier
if TYPE_CHECKING:
from .utils import JWTConfig
from supertokens_python.supertokens import AppInfo
from supertokens_python.recipe.jwt.interfaces import (
CreateJwtOkResult,
CreateJwtResultUnsupportedAlgorithm,
GetJWKSResult,
RecipeInterface,
)
from .interfaces import JsonWebKey
class RecipeImplementation(RecipeInterface):
def __init__(self, querier: Querier, config: JWTConfig, app_info: AppInfo):
super().__init__()
self.querier = querier
self.config = config
self.app_info = app_info
async def create_jwt(
self,
payload: Dict[str, Any],
validity_seconds: Optional[int],
use_static_signing_key: Optional[bool],
user_context: Dict[str, Any],
) -> Union[CreateJwtOkResult, CreateJwtResultUnsupportedAlgorithm]:
if validity_seconds is None:
validity_seconds = self.config.jwt_validity_seconds
data = {
"payload": payload,
"validity": validity_seconds,
"use_static_signing_key": use_static_signing_key is not False,
"algorithm": "RS256",
"jwksDomain": self.app_info.api_domain.get_as_string_dangerous(),
}
response = await self.querier.send_post_request(
NormalisedURLPath("/recipe/jwt"), data
)
if response["status"] == "OK":
return CreateJwtOkResult(response["jwt"])
return CreateJwtResultUnsupportedAlgorithm()
async def get_jwks(self, user_context: Dict[str, Any]) -> GetJWKSResult:
response = await self.querier.send_get_request(
NormalisedURLPath("/.well-known/jwks.json"), {}
)
keys: List[JsonWebKey] = []
for key in response["keys"]:
keys.append(
JsonWebKey(
key["kty"], key["kid"], key["n"], key["e"], key["alg"], key["use"]
)
)
return GetJWKSResult(keys)
Classes
class RecipeImplementation (querier: Querier, config: JWTConfig, app_info: AppInfo)
-
Helper class that provides a standard way to create an ABC using inheritance.
Expand source code
class RecipeImplementation(RecipeInterface): def __init__(self, querier: Querier, config: JWTConfig, app_info: AppInfo): super().__init__() self.querier = querier self.config = config self.app_info = app_info async def create_jwt( self, payload: Dict[str, Any], validity_seconds: Optional[int], use_static_signing_key: Optional[bool], user_context: Dict[str, Any], ) -> Union[CreateJwtOkResult, CreateJwtResultUnsupportedAlgorithm]: if validity_seconds is None: validity_seconds = self.config.jwt_validity_seconds data = { "payload": payload, "validity": validity_seconds, "use_static_signing_key": use_static_signing_key is not False, "algorithm": "RS256", "jwksDomain": self.app_info.api_domain.get_as_string_dangerous(), } response = await self.querier.send_post_request( NormalisedURLPath("/recipe/jwt"), data ) if response["status"] == "OK": return CreateJwtOkResult(response["jwt"]) return CreateJwtResultUnsupportedAlgorithm() async def get_jwks(self, user_context: Dict[str, Any]) -> GetJWKSResult: response = await self.querier.send_get_request( NormalisedURLPath("/.well-known/jwks.json"), {} ) keys: List[JsonWebKey] = [] for key in response["keys"]: keys.append( JsonWebKey( key["kty"], key["kid"], key["n"], key["e"], key["alg"], key["use"] ) ) return GetJWKSResult(keys)
Ancestors
- RecipeInterface
- abc.ABC
Methods
async def create_jwt(self, payload: Dict[str, Any], validity_seconds: Optional[int], use_static_signing_key: Optional[bool], user_context: Dict[str, Any]) ‑> Union[CreateJwtOkResult, CreateJwtResultUnsupportedAlgorithm]
-
Expand source code
async def create_jwt( self, payload: Dict[str, Any], validity_seconds: Optional[int], use_static_signing_key: Optional[bool], user_context: Dict[str, Any], ) -> Union[CreateJwtOkResult, CreateJwtResultUnsupportedAlgorithm]: if validity_seconds is None: validity_seconds = self.config.jwt_validity_seconds data = { "payload": payload, "validity": validity_seconds, "use_static_signing_key": use_static_signing_key is not False, "algorithm": "RS256", "jwksDomain": self.app_info.api_domain.get_as_string_dangerous(), } response = await self.querier.send_post_request( NormalisedURLPath("/recipe/jwt"), data ) if response["status"] == "OK": return CreateJwtOkResult(response["jwt"]) return CreateJwtResultUnsupportedAlgorithm()
async def get_jwks(self, user_context: Dict[str, Any]) ‑> GetJWKSResult
-
Expand source code
async def get_jwks(self, user_context: Dict[str, Any]) -> GetJWKSResult: response = await self.querier.send_get_request( NormalisedURLPath("/.well-known/jwks.json"), {} ) keys: List[JsonWebKey] = [] for key in response["keys"]: keys.append( JsonWebKey( key["kty"], key["kid"], key["n"], key["e"], key["alg"], key["use"] ) ) return GetJWKSResult(keys)