flask-jwt-extended
flask-jwt-extended copied to clipboard
vimalloc
An open source Flask extension that provides JWT support (with batteries included)!
All error handler callbacks should include the original error message in the parameters. E.g, the `_expired_token_callback` takes `e.jwt_header, e.jwt_data` as parameters, thus the original error message is lost when setting...
Following a discussion on Discord: ## Issue Currently, multi-service setups require some kind of external method of synchronizing keys. ## Proposed change I propose an extension of this package that...
Added the ability to create tokens with types other than "access" and "refresh", among some other intuitive changes. This is done in such a way that will not introduce any...
Hello, Thanks for the great work ! With the OPTIONS HTTP method, a confusing error message is raised, stating that @jwt_required() was not called, although it was called: > "You...
Hi, i need to parse the token from JSON that is in `request.event` var (SocketIO) and for that i had to implement custom _decode_jwt_from_event and wire it it like this...
There is a possible conflict between logout and token prolongation. In the actual example, a new access cookie could be set after the logout request.
It looks to me that this part is not yet implemented: ``` def jwt_required(fn): @wraps(fn) def wrapper(*args, **kwargs): jwt_data = _decode_jwt_from_request(request_type='access') ctx_stack.top.jwt = jwt_data _load_user(jwt_data[config.identity_claim]) return fn(*args, **kwargs) return wrapper...
I’d love to see the possibly of simply sub-classing `JWTManager` and overwriting methods instead of defining callbacks using decorators. Currently it’s not possible to do that because the default callbacks...
It doesn't seem that there is any conflict with (for example) Flask 2.0.1, so why is this an enforced dependency? Is there some particular feature of Flask v2 that breaks...
Bumps [black](https://github.com/psf/black) from 23.12.1 to 24.3.0. Release notes Sourced from black's releases. 24.3.0 Highlights This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}