dj-jwt-auth 1.5.6__py3-none-any.whl → 1.5.8__py3-none-any.whl

{dj_jwt_auth-1.5.6.dist-info → dj_jwt_auth-1.5.8.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: dj-jwt-auth
-Version: 1.5.6
+Version: 1.5.8
 Summary: A Django package for JSON Web Token validation and verification. Using PyJWT.
 Home-page: https://www.example.com/
 Author: Konstantin Seleznev

{dj_jwt_auth-1.5.6.dist-info → dj_jwt_auth-1.5.8.dist-info}/RECORD

@@ -2,20 +2,20 @@ django_jwt/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 django_jwt/config.py,sha256=-9JkGjMXRVNmQYPvrEwaoJacu068nySNfjMyo5DtXcw,1550
 django_jwt/exceptions.py,sha256=vFJcGOCSZvxJRbSeMgWgPUM9wcXu6CSHblpwMzhV-Ic,198
 django_jwt/middleware.py,sha256=4PiF0-v13aLjvTyeyumQqYFimb6gCDHBgm6KooPGZdM,1176
-django_jwt/pkce.py,sha256=HYIQI0vKSmQkYIqTj3cciIT01ldkjhqlYiXkYcnNSGc,711
+django_jwt/pkce.py,sha256=j-v2ffCw0X3JW7ak8vfNeSZI-dACOvHbi1eLmJ0R8gM,685
 django_jwt/roles.py,sha256=SaHK3o8T8USS4ZhG4SrHPlZQV2lMb2t1UZHT6IQtBvA,143
-django_jwt/settings.py,sha256=4mc8daSDKs3uYlRJBuS4CP7_CtKD3VrLWvaBjJ6yJV8,1837
+django_jwt/settings.py,sha256=pXQ8WUU4LGBe6PQxCLTLM_2_b1CCSgehqim3yJDqZdw,1922
 django_jwt/urls.py,sha256=ZhcnRcQ1MBRh-bS7fTa-Vkz8yuWUhv-G_uRXKLnKAs0,320
-django_jwt/user.py,sha256=lQ7AIdI4J-d2e1oCQIIyQKnXtjqCYD14e4WOhF2LbYs,5292
-django_jwt/utils.py,sha256=Gz8cH0cD3y_cvW8FwRoCFgShBrYvcB7XBF0GWx0n2qQ,1485
-django_jwt/views.py,sha256=MDuMPzmEAjWR6lB8ZyiozAJYH49MaiYeztE1we_u-9M,4352
+django_jwt/user.py,sha256=FZLspkoCcVbT9Nsdg7B6yjI3stx19HMlOyRcBFjHnrs,5290
+django_jwt/utils.py,sha256=uIFw1JMldE_blC7YkaZbY7rpcawP2E6zsdLyuZRwJoA,1645
+django_jwt/views.py,sha256=jQW3YrW-Oed54KqxjDMaBOQ-dxEnqTAcBEXlQSK-zCE,4231
 django_jwt/templates/django-jwt-index.html,sha256=y8f0v2WbRAFxnIU799I_MZCVsjn1sbdh7bypjdWB0lA,1353
 django_jwt/templates/admin/login.html,sha256=Nihyu0IGvDDZVvQDITXozwlj6XCQ0B8gqlyHLqVNyJc,275
 tests/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 tests/models.py,sha256=4uonwXuAvJGlITpuxFazyoeA_CSUYMyN7Vj1gEWJTH4,308
 tests/test.py,sha256=nD1sm_nH0l9ADnwavySPdhgrNOvLX7nLYol7w306TFU,9720
 tests/urls.py,sha256=D5FhDSVAudurkrpkCZZPnDvgXSgifwFVB3nAlYBg7uQ,212
-dj_jwt_auth-1.5.6.dist-info/METADATA,sha256=jgfJxaxVrgPgzLwbR4xR7_ofMjYRosK78hmePUR0qVM,4369
-dj_jwt_auth-1.5.6.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-dj_jwt_auth-1.5.6.dist-info/top_level.txt,sha256=58O7TdK-yECZcbmPc52KNlBFpjIUlENuZubCxaSOxus,17
-dj_jwt_auth-1.5.6.dist-info/RECORD,,
+dj_jwt_auth-1.5.8.dist-info/METADATA,sha256=KRwEjwyLJwXqsg9F4YbxC1AjbGZ2Dduk06NnAaAj4n8,4369
+dj_jwt_auth-1.5.8.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
+dj_jwt_auth-1.5.8.dist-info/top_level.txt,sha256=58O7TdK-yECZcbmPc52KNlBFpjIUlENuZubCxaSOxus,17
+dj_jwt_auth-1.5.8.dist-info/RECORD,,

django_jwt/pkce.py

@@ -1,14 +1,14 @@
 import base64
 import hashlib
-import random
-import string
+
+from django_jwt.utils import get_random_string
 
 
 class PKCESecret:
     """PKCE secret."""
 
     def __init__(self, length: int = 128):
-        self.value = "".join(random.choices(string.ascii_letters + string.digits, k=length))
+        self.value = get_random_string(length)
 
     def __str__(self) -> str:
         return self.value

django_jwt/settings.py

@@ -42,8 +42,11 @@ OIDC_ADMIN_ISSUER = getattr(settings, "OIDC_ADMIN_ISSUER", None)
 OIDC_ADMIN_CLIENT_ID = getattr(settings, "OIDC_ADMIN_CLIENT_ID", "cs-completeanatomy-admin")
 OIDC_ADMIN_SCOPE = getattr(settings, "OIDC_ADMIN_SCOPE", "openid")
 OIDC_ADMIN_ROLES = getattr(settings, "OIDC_ADMIN_ROLES", [])
+OIDC_ADMIN_REDIRECT_URI = getattr(settings, "OIDC_ADMIN_REDIRECT_URI", None)
 OIDC_AUTHORIZATION_BACKEND = getattr(
-    settings, "OIDC_AUTHORIZATION_BACKEND", "django.contrib.auth.backends.ModelBackend",
+    settings,
+    "OIDC_AUTHORIZATION_BACKEND",
+    "django.contrib.auth.backends.ModelBackend",
 )
 
 if not OIDC_ADMIN_ISSUER:

django_jwt/user.py

@@ -43,7 +43,7 @@ class UserHandler:
         """Collect user data from KeyCloak"""
 
         user_data = oidc_handler.get_user_info(self.access_token)
-        log.info(f"User data: {self.kwargs}, access_token: {self.access_token}")
+        log.info(f"User data: {user_data}, access_token: {self.access_token}")
         self.kwargs["email"] = user_data["email"].lower()
         self.kwargs.update(mapper(user_data))
 

django_jwt/utils.py

@@ -1,5 +1,7 @@
 import base64
 import json
+import random
+import string
 
 import jwt
 import requests
@@ -8,6 +10,10 @@ from django_jwt import settings
 from django_jwt.config import config
 
 
+def get_random_string(k: int = 32) -> str:
+    return "".join(random.choices(string.ascii_letters + string.digits + "-._~", k=k))
+
+
 def get_alg(token: str) -> str:
     header = json.loads(base64.b64decode(token.split(".")[0] + "==="))
     return header["alg"]

django_jwt/views.py

@@ -1,10 +1,7 @@
 import base64
-import random
-import string
 from logging import getLogger
 from urllib.parse import urlencode
 
-from django.conf import settings
 from django.contrib.auth import login
 from django.core.cache import cache
 from django.http.response import HttpResponse
@@ -18,7 +15,7 @@ from django_jwt.config import config
 from django_jwt.exceptions import BadRequestException, ConfigException
 from django_jwt.pkce import PKCESecret
 from django_jwt.user import UserHandler, role_handler
-from django_jwt.utils import get_access_token, oidc_handler
+from django_jwt.utils import get_access_token, get_random_string, oidc_handler
 
 log = getLogger(__name__)
 
@@ -60,12 +57,11 @@ class AbsView(View):
 class StartOIDCAuthView(AbsView):
     def get(self, request):
         pkce_secret = PKCESecret()
-        redirect_uri = request.build_absolute_uri(reverse("receive_redirect_view"))
+        redirect_uri = jwt_settings.OIDC_ADMIN_REDIRECT_URI
+        if not redirect_uri:
+            redirect_uri = request.build_absolute_uri(reverse("receive_redirect_view"))
         authorization_endpoint = config.admin().get("authorization_endpoint")
-        state = base64.urlsafe_b64encode(
-            "".join(random.choices(string.ascii_letters + string.digits + "-._~", k=32)).encode()
-        ).decode()
-        random_nonce = "".join(random.choices(string.ascii_letters + string.digits + "-._~", k=32))
+        state = base64.urlsafe_b64encode(get_random_string().encode()).decode()
         params = {
             "client_id": jwt_settings.OIDC_ADMIN_CLIENT_ID,
             "redirect_uri": redirect_uri,
@@ -75,7 +71,7 @@ class StartOIDCAuthView(AbsView):
             "code_challenge": pkce_secret.challenge,
             "code_challenge_method": pkce_secret.challenge_method,
             "ui_locales": "en",
-            "nonce": random_nonce,
+            "nonce": get_random_string(),
         }
         cache.set(state, str(pkce_secret), timeout=600)
         log.info(f"OIDC Admin login: {authorization_endpoint}?{urlencode(params)}")