django-rest-framework-jwt
django-rest-framework-jwt copied to clipboard
jpadilla
JSON Web Token Authentication support for Django REST Framework
added setting JWT_PUBLIC_KEY_USING_HEADER_HANDLER to dynamically fetch public keys based on the header when setting an import path to a callable into JWT_PUBLIC_KEY_USING_HEADER_HANDLER, it will be called with the JWT header...
JSON web token authorization lib is not working in the latest django rest framework and it is also defined in the official docs of it. I have searched many ways...
After using JWT token in un unsafe way for a little over an year I've finally decided that I would like to fix my current setup. I read everywhere that...
Status
Hello there, For a long time now I've honestly thought I'd have the time and energy to come back and work on this project, and I think I still don't....
If we don't do this, then `request.user` will be the wrong instance after authenticating - which can lead to some weird issues. Specifically, in projects that use `request.user` in response...
In my system while space character is allowed, but when I try to get auth token with rest_framework-jwt, I got HTTP 400 response. I traced down the code, `PasswordField` is...
To prevent Cross-Site Request Forgery when using JWT_AUTH_COOKIE, the `csrftoken` cookie will also be set when issuing the JWT authentication token.
I'm using JWT in a httpOnly cookie and allowing multiple logins on the system. If I have 2 sessions opened with the same user (different JWT tokens) and if one...
after changing my password my old tokens are still working, I think changing password should expire all old tokens, I didn't find anything about that on docs, so I think...
with DRF authtoken it is possible to make a 'logout' in this way; class Logout(APIView): queryset = User.objects.all() def get(self, request, format=None): # simply delete the token to force a...
