fastapi-oidc-jwks 0.0.1__tar.gz

fastapi_oidc_jwks-0.0.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2023 Maxime Moreillon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

fastapi_oidc_jwks-0.0.1/PKG-INFO

@@ -0,0 +1,18 @@
+Metadata-Version: 2.4
+Name: fastapi-oidc-jwks
+Version: 0.0.1
+Summary: A FastAPI dependency used to verify a user's OAuth access token with JWKS.
+Author-email: Maxime Moreillon <m.moreillon@gmail.com>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/maximemoreillon/fastapi-oidc-jwks
+Project-URL: Issues, https://github.com/maximemoreillon/fastapi-oidc-jwks/issues
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# FastAPI OIDC JWKS
+
+A FastAPI dependency used to verify a user's OAuth access token with JWKS.

fastapi_oidc_jwks-0.0.1/README.md

@@ -0,0 +1,3 @@
+# FastAPI OIDC JWKS
+
+A FastAPI dependency used to verify a user's OAuth access token with JWKS.

fastapi_oidc_jwks-0.0.1/pyproject.toml

@@ -0,0 +1,19 @@
+[project]
+name = "fastapi-oidc-jwks"
+version = "0.0.1"
+authors = [
+  { name="Maxime Moreillon", email="m.moreillon@gmail.com" },
+]
+description = "A FastAPI dependency used to verify a user's OAuth access token with JWKS."
+readme = "README.md"
+requires-python = ">=3.9"
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "Operating System :: OS Independent",
+]
+license = "MIT"
+license-files = ["LICEN[CS]E*"]
+
+[project.urls]
+Homepage = "https://github.com/maximemoreillon/fastapi-oidc-jwks"
+Issues = "https://github.com/maximemoreillon/fastapi-oidc-jwks/issues"

fastapi_oidc_jwks-0.0.1/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

fastapi_oidc_jwks-0.0.1/src/fastapi-oidc-jwks/dependency.py

@@ -0,0 +1,39 @@
+from fastapi import FastAPI, HTTPException, Security
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+import jwt
+from jwt import PyJWKClient
+
+app = FastAPI()
+
+
+class AuthDependency:
+    def __init__(self, jwks_uri: str):
+        self.jwks_uri = jwks_uri
+        self.jwks_client = PyJWKClient(self.jwks_uri)
+        self.audience = None  # For now
+
+    def __call__(
+        self,
+        credentials: HTTPAuthorizationCredentials = Security(HTTPBearer()),
+    ):
+        token = credentials.credentials
+
+        try:
+            signing_key = self.jwks_client.get_signing_key_from_jwt(token)
+            return jwt.decode(
+                token,
+                signing_key.key,
+                algorithms=["RS256"],
+                audience=self.audience,
+                # issuer=self.issuer, # For now
+                options={"verify_aud": self.audience is not None},
+            )
+
+        except jwt.ExpiredSignatureError:
+            raise HTTPException(status_code=401, detail="Token expired")
+        except jwt.InvalidAudienceError:
+            raise HTTPException(status_code=401, detail="Invalid audience")
+        except jwt.InvalidIssuerError:
+            raise HTTPException(status_code=401, detail="Invalid issuer")
+        except jwt.PyJWTError as e:
+            raise HTTPException(status_code=401, detail=f"Invalid token: {str(e)}")

fastapi_oidc_jwks-0.0.1/src/fastapi-oidc-jwks/middleware.py

@@ -0,0 +1,54 @@
+from typing import Dict, Any, Optional
+from fastapi import FastAPI, Request
+from fastapi.responses import JSONResponse
+from fastapi.security.utils import get_authorization_scheme_param
+from starlette.middleware.base import BaseHTTPMiddleware
+import jwt
+from jwt import PyJWKClient
+
+
+class JWTAuthMiddleware(BaseHTTPMiddleware):
+    def __init__(
+        self,
+        app: FastAPI,
+        jwks_url: str,
+        issuer: Optional[str] = None,
+        audience: Optional[str] = None,
+    ):
+        super().__init__(app)
+        self.jwks_client = PyJWKClient(jwks_url)
+        self.issuer = issuer
+        self.audience = audience
+
+    async def dispatch(self, request: Request, call_next):
+        # Require Authorization header
+        auth: str = request.headers.get("Authorization")
+        scheme, token = get_authorization_scheme_param(auth)
+
+        if not token or scheme.lower() != "bearer":
+            return JSONResponse({"detail": "Not authenticated"}, status_code=401)
+
+        try:
+            signing_key = self.jwks_client.get_signing_key_from_jwt(token)
+            payload: Dict[str, Any] = jwt.decode(
+                token,
+                signing_key.key,
+                algorithms=["RS256"],
+                audience=self.audience,
+                issuer=self.issuer,
+                options={"verify_aud": self.audience is not None},
+            )
+
+            # Attach user claims to request state
+            request.state.user = payload
+
+        except jwt.ExpiredSignatureError:
+            return JSONResponse({"detail": "Token expired"}, status_code=401)
+        except jwt.InvalidAudienceError:
+            return JSONResponse({"detail": "Invalid audience"}, status_code=401)
+        except jwt.InvalidIssuerError:
+            return JSONResponse({"detail": "Invalid issuer"}, status_code=401)
+        except jwt.PyJWTError as e:
+            return JSONResponse({"detail": f"Invalid token: {str(e)}"}, status_code=401)
+
+        return await call_next(request)

fastapi_oidc_jwks-0.0.1/src/fastapi_oidc_jwks.egg-info/PKG-INFO

@@ -0,0 +1,18 @@
+Metadata-Version: 2.4
+Name: fastapi-oidc-jwks
+Version: 0.0.1
+Summary: A FastAPI dependency used to verify a user's OAuth access token with JWKS.
+Author-email: Maxime Moreillon <m.moreillon@gmail.com>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/maximemoreillon/fastapi-oidc-jwks
+Project-URL: Issues, https://github.com/maximemoreillon/fastapi-oidc-jwks/issues
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# FastAPI OIDC JWKS
+
+A FastAPI dependency used to verify a user's OAuth access token with JWKS.

fastapi_oidc_jwks-0.0.1/src/fastapi_oidc_jwks.egg-info/SOURCES.txt

@@ -0,0 +1,10 @@
+LICENSE
+README.md
+pyproject.toml
+src/fastapi-oidc-jwks/__init__.py
+src/fastapi-oidc-jwks/dependency.py
+src/fastapi-oidc-jwks/middleware.py
+src/fastapi_oidc_jwks.egg-info/PKG-INFO
+src/fastapi_oidc_jwks.egg-info/SOURCES.txt
+src/fastapi_oidc_jwks.egg-info/dependency_links.txt
+src/fastapi_oidc_jwks.egg-info/top_level.txt

fastapi_oidc_jwks-0.0.1/src/fastapi_oidc_jwks.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

fastapi_oidc_jwks-0.0.1/src/fastapi_oidc_jwks.egg-info/top_level.txt

@@ -0,0 +1 @@
+fastapi-oidc-jwks