pypomes-jwt 0.7.4__py3-none-any.whl → 0.7.6__py3-none-any.whl

pypomes_jwt/jwt_pomes.py

@@ -6,7 +6,7 @@ from typing import Any, Literal
 from .jwt_constants import (
     JWT_ACCESS_MAX_AGE, JWT_REFRESH_MAX_AGE,
     JWT_DEFAULT_ALGORITHM, JWT_DECODING_KEY,
-    JWT_DB_ENGINE, JWT_DB_TABLE, JWT_DB_COL_ACCOUNT
+    JWT_DB_ENGINE, JWT_DB_TABLE, JWT_DB_COL_ACCOUNT, JWT_DB_COL_TOKEN
 )
 from .jwt_data import JwtData
 
@@ -227,10 +227,22 @@ def jwt_get_tokens(errors: list[str] | None,
         logger.debug(msg=f"Retrieve JWT token data for '{account_id}'")
     op_errors: list[str] = []
     if refresh_token:
-        account_claims = jwt_get_claims(errors=op_errors,
-                                        token=refresh_token)
-        if not op_errors and account_claims.get("nat") != "R":
-            op_errors.extend("Invalid parameters")
+        # verify whether this refresh token is legitimate
+        if JWT_DB_ENGINE:
+            from pypomes_db import db_select
+            recs: list[tuple[str]] = db_select(errors=op_errors,
+                                               sel_stmt=f"SELECT {JWT_DB_COL_TOKEN} "
+                                                        f"FROM {JWT_DB_TABLE}",
+                                               where_data={JWT_DB_COL_ACCOUNT: f"'{account_id}'"},
+                                               logger=logger)
+            if not op_errors and \
+                    (len(recs) == 0 or recs[0][0] != refresh_token):
+                op_errors.append("Invalid refresh token")
+        if not op_errors:
+            account_claims = jwt_get_claims(errors=op_errors,
+                                            token=refresh_token)
+            if not op_errors and account_claims.get("nat") != "R":
+                op_errors.append("Invalid parameters")
 
     if not op_errors:
         try:

{pypomes_jwt-0.7.4.dist-info → pypomes_jwt-0.7.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pypomes_jwt
-Version: 0.7.4
+Version: 0.7.6
 Summary: A collection of Python pomes, penyeach (JWT module)
 Project-URL: Homepage, https://github.com/TheWiseCoder/PyPomes-JWT
 Project-URL: Bug Tracker, https://github.com/TheWiseCoder/PyPomes-JWT/issues

pypomes_jwt-0.7.6.dist-info/RECORD

@@ -0,0 +1,8 @@
+pypomes_jwt/__init__.py,sha256=dkWeYPNwypjwFuTjx4YtC8QV9ihykF4xcJJ7x86Wc5g,1130
+pypomes_jwt/jwt_constants.py,sha256=xUX2raEaDUPJsjAm78lQ0APs4KSs5GYBxSPC5QKrrFE,4327
+pypomes_jwt/jwt_data.py,sha256=YH3v8zvOURkB_o0XLMu2y2sFkKCxZBmbyWU5rC2gre4,16419
+pypomes_jwt/jwt_pomes.py,sha256=eRQSLA8DVzr9MfVOh5bl6Zz3iOQtRIAQjzIfoz6Fj9o,12915
+pypomes_jwt-0.7.6.dist-info/METADATA,sha256=5N0G1VHBXKHiH-QAnUBC9UgeqpjOh9-4-BYMtAl680U,599
+pypomes_jwt-0.7.6.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+pypomes_jwt-0.7.6.dist-info/licenses/LICENSE,sha256=NdakochSXm_H_-DSL_x2JlRCkYikj3snYYvTwgR5d_c,1086
+pypomes_jwt-0.7.6.dist-info/RECORD,,

pypomes_jwt-0.7.4.dist-info/RECORD

@@ -1,8 +0,0 @@
-pypomes_jwt/__init__.py,sha256=dkWeYPNwypjwFuTjx4YtC8QV9ihykF4xcJJ7x86Wc5g,1130
-pypomes_jwt/jwt_constants.py,sha256=xUX2raEaDUPJsjAm78lQ0APs4KSs5GYBxSPC5QKrrFE,4327
-pypomes_jwt/jwt_data.py,sha256=YH3v8zvOURkB_o0XLMu2y2sFkKCxZBmbyWU5rC2gre4,16419
-pypomes_jwt/jwt_pomes.py,sha256=zFU1TyeR3BhK9ToC1Vs1wh67uE2DGvzH9FltiQxI0EM,12160
-pypomes_jwt-0.7.4.dist-info/METADATA,sha256=DwlCneMVk9Qv4RovwWslSRK_zb2DF5lgnJd4nRVeeWE,599
-pypomes_jwt-0.7.4.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-pypomes_jwt-0.7.4.dist-info/licenses/LICENSE,sha256=NdakochSXm_H_-DSL_x2JlRCkYikj3snYYvTwgR5d_c,1086
-pypomes_jwt-0.7.4.dist-info/RECORD,,