cardo-python-utils 0.5.dev15__tar.gz → 0.5.dev16__tar.gz

{cardo_python_utils-0.5.dev15/cardo_python_utils.egg-info → cardo_python_utils-0.5.dev16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev15
+Version: 0.5.dev16
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev15 → cardo_python_utils-0.5.dev16/cardo_python_utils.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev15
+Version: 0.5.dev16
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev15 → cardo_python_utils-0.5.dev16}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cardo-python-utils"
-version = "0.5.dev15"
+version = "0.5.dev16"
 description = "Python library enhanced with a wide range of functions for different scenarios."
 readme = "README.rst"
 requires-python = ">=3.8"

{cardo_python_utils-0.5.dev15 → cardo_python_utils-0.5.dev16}/python_utils/django/keycloak/api/drf.py

@@ -13,7 +13,7 @@ class AuthenticationBackend(authentication.TokenAuthentication):
 
     def authenticate_credentials(self, token: str):
         try:
-            payload = decode_jwt(token)
+            payload = decode_jwt(token, audience=self._get_audience())
         except InvalidTokenError as e:
             raise AuthenticationFailed(f"Invalid token: {str(e)}") from e
 
@@ -26,6 +26,12 @@ class AuthenticationBackend(authentication.TokenAuthentication):
 
         user = create_or_update_user(username, payload)
         return user, payload
+    
+    def _get_audience(self):
+        """
+        Allows subclasses to override the audience used for JWT decoding.
+        """
+        return getattr(settings, "JWT_AUDIENCE", None)
 
 
 class HasScope(BasePermission):

{cardo_python_utils-0.5.dev15 → cardo_python_utils-0.5.dev16}/python_utils/django/keycloak/api/utils.py

@@ -1,4 +1,4 @@
-from typing import TypedDict, Union
+from typing import Optional, TypedDict, Union
 
 from django.conf import settings
 from django.contrib.auth import get_user_model
@@ -27,7 +27,7 @@ class TokenPayload(TypedDict, total=False):
     groups: list[str]  # Full path of the user group, e.g. "/group1/subgroup1"
 
 
-def decode_jwt(token: str) -> TokenPayload:
+def decode_jwt(token: str, audience: Optional[str] = None) -> TokenPayload:
     """
     Decode a JWT token using the public certificate of the Auth Server.
 
@@ -36,11 +36,14 @@ def decode_jwt(token: str) -> TokenPayload:
     """
     signing_key = jwks_client.get_signing_key_from_jwt(token)
 
+    if audience is None:
+        audience = getattr(settings, "JWT_AUDIENCE", None)
+
     return decode(
         token,
         signing_key.key,
         algorithms=["RS256"],
-        audience=getattr(settings, "JWT_AUDIENCE", None),
+        audience=audience,
     )