chainlit 2.0.1__py3-none-any.whl → 2.0.2__py3-none-any.whl

chainlit/auth/cookie.py

@@ -13,14 +13,13 @@ _cookie_samesite = cast(
     os.environ.get("CHAINLIT_COOKIE_SAMESITE", "lax"),
 )
 
-assert (
-    _cookie_samesite
-    in [
-        "lax",
-        "strict",
-        "none",
-    ]
-), "Invalid value for CHAINLIT_COOKIE_SAMESITE. Must be one of 'lax', 'strict' or 'none'."
+assert _cookie_samesite in [
+    "lax",
+    "strict",
+    "none",
+], (
+    "Invalid value for CHAINLIT_COOKIE_SAMESITE. Must be one of 'lax', 'strict' or 'none'."
+)
 _cookie_secure = _cookie_samesite == "none"
 
 _auth_cookie_lifetime = 60 * 60  # 1 hour

chainlit/auth/jwt.py

@@ -1,5 +1,5 @@
-import datetime
 import os
+from datetime import datetime, timedelta, timezone
 from typing import Any, Dict, Optional
 
 import jwt as pyjwt
@@ -16,10 +16,12 @@ def create_jwt(data: User) -> str:
     to_encode: Dict[str, Any] = data.to_dict()
     to_encode.update(
         {
-            "exp": datetime.datetime.utcnow()
-            + datetime.timedelta(seconds=config.project.user_session_timeout),
+            "exp": datetime.now(timezone.utc)
+            + timedelta(seconds=config.project.user_session_timeout),
+            "iat": datetime.now(timezone.utc),  # Add issued at time
         }
     )
+
     secret = get_jwt_secret()
     assert secret
     encoded_jwt = pyjwt.encode(to_encode, secret, algorithm="HS256")