cardo-python-utils 0.5.dev15__py3-none-any.whl → 0.5.dev16__py3-none-any.whl

{cardo_python_utils-0.5.dev15.dist-info → cardo_python_utils-0.5.dev16.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev15
+Version: 0.5.dev16
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev15.dist-info → cardo_python_utils-0.5.dev16.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cardo_python_utils-0.5.dev15.dist-info/licenses/LICENSE,sha256=N-YtxDy8n5A1Mo7JKKItNIlboiK_pMOZ48ojx76jo3g,1046
+cardo_python_utils-0.5.dev16.dist-info/licenses/LICENSE,sha256=N-YtxDy8n5A1Mo7JKKItNIlboiK_pMOZ48ojx76jo3g,1046
 python_utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 python_utils/choices.py,sha256=_sLNkSnQqhg55gGKNRsOQCJ75W6gnz8J8Q00528MEYk,2548
 python_utils/data_structures.py,sha256=ZqkZYPy20zyGYOVhwb9qst4vF_P7X2A9z5E36rMUC6I,16820
@@ -18,12 +18,12 @@ python_utils/django/keycloak/admin/auth.py,sha256=0aB3kP7r3Vk1xTM341os5-pv_JVv1l
 python_utils/django/keycloak/admin/user_group.py,sha256=3-zfrehLR_nVP-60Zw4ViJjBY1lLAmmlbXaUW1pQs4Q,2668
 python_utils/django/keycloak/admin/user_groups_changelist.html,sha256=KbO6bsH-nh3DDYCq4UB8j25NdjLP_nh_GuGZ4lYSarM,182
 python_utils/django/keycloak/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-python_utils/django/keycloak/api/drf.py,sha256=PtMA0j9nlUxQ9VxAlP5_FnoxlMdjNZLi2ilKplh9A0c,2701
+python_utils/django/keycloak/api/drf.py,sha256=i4vZoZXta8IOsGO5YerAEfVyc9jMyD95lVePuaB4eeg,2919
 python_utils/django/keycloak/api/ninja.py,sha256=PO_i-Wr_sK8f45KddKDg5kMAfiEEN1DibYlsMEYYom8,4727
-python_utils/django/keycloak/api/utils.py,sha256=TktKfgASNySjn5y8UkU1hc7yML1lDYkVllpL4YYjGQ4,2878
+python_utils/django/keycloak/api/utils.py,sha256=yGUrB1LGatGVy0PFuFhz3t5INWr0xcarGnoZg2-q3B8,2974
 python_utils/django/keycloak/models/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 python_utils/django/keycloak/models/user_group.py,sha256=WU_KClfj-pboDIKUDHZQfQuhAPIPXgP-LrEvg9XJjmA,504
-cardo_python_utils-0.5.dev15.dist-info/METADATA,sha256=-oC58K9m_7MXJhU7JP8XmFmJMWSLQ4qHPPmK_b-9wCQ,2915
-cardo_python_utils-0.5.dev15.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-cardo_python_utils-0.5.dev15.dist-info/top_level.txt,sha256=zAx6OfEsjJs8BEW3okSiG_j9gpkI69xWShzum6oBgKI,13
-cardo_python_utils-0.5.dev15.dist-info/RECORD,,
+cardo_python_utils-0.5.dev16.dist-info/METADATA,sha256=OqQtC4cfsEKsNt6h98GflZ6lDsQNcPZwXiBZnatz6tE,2915
+cardo_python_utils-0.5.dev16.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+cardo_python_utils-0.5.dev16.dist-info/top_level.txt,sha256=zAx6OfEsjJs8BEW3okSiG_j9gpkI69xWShzum6oBgKI,13
+cardo_python_utils-0.5.dev16.dist-info/RECORD,,

python_utils/django/keycloak/api/drf.py

@@ -13,7 +13,7 @@ class AuthenticationBackend(authentication.TokenAuthentication):
 
     def authenticate_credentials(self, token: str):
         try:
-            payload = decode_jwt(token)
+            payload = decode_jwt(token, audience=self._get_audience())
         except InvalidTokenError as e:
             raise AuthenticationFailed(f"Invalid token: {str(e)}") from e
 
@@ -26,6 +26,12 @@ class AuthenticationBackend(authentication.TokenAuthentication):
 
         user = create_or_update_user(username, payload)
         return user, payload
+    
+    def _get_audience(self):
+        """
+        Allows subclasses to override the audience used for JWT decoding.
+        """
+        return getattr(settings, "JWT_AUDIENCE", None)
 
 
 class HasScope(BasePermission):

python_utils/django/keycloak/api/utils.py

@@ -1,4 +1,4 @@
-from typing import TypedDict, Union
+from typing import Optional, TypedDict, Union
 
 from django.conf import settings
 from django.contrib.auth import get_user_model
@@ -27,7 +27,7 @@ class TokenPayload(TypedDict, total=False):
     groups: list[str]  # Full path of the user group, e.g. "/group1/subgroup1"
 
 
-def decode_jwt(token: str) -> TokenPayload:
+def decode_jwt(token: str, audience: Optional[str] = None) -> TokenPayload:
     """
     Decode a JWT token using the public certificate of the Auth Server.
 
@@ -36,11 +36,14 @@ def decode_jwt(token: str) -> TokenPayload:
     """
     signing_key = jwks_client.get_signing_key_from_jwt(token)
 
+    if audience is None:
+        audience = getattr(settings, "JWT_AUDIENCE", None)
+
     return decode(
         token,
         signing_key.key,
         algorithms=["RS256"],
-        audience=getattr(settings, "JWT_AUDIENCE", None),
+        audience=audience,
     )