pypomes-jwt 0.8.1__py3-none-any.whl → 0.8.2__py3-none-any.whl

pypomes_jwt/jwt_data.py

@@ -239,8 +239,8 @@ class JwtData:
                     just_now: int = int(datetime.now(tz=timezone.utc).timestamp())
                     current_claims["iat"] = just_now
                     token_header: dict[str, Any] = None \
-                        if JWT_DEFAULT_ALGORITHM not in ["RSA256", "RSA512"] \
-                        else {"kid": JWT_DECODING_KEY}
+                        if JWT_DEFAULT_ALGORITHM not in ["RS256", "RS512"] \
+                        else {"kid": JWT_DECODING_KEY.hex()}
 
                     # issue the access token first
                     current_claims["nat"] = "A"

pypomes_jwt/jwt_pomes.py

@@ -7,8 +7,7 @@ from typing import Any, Literal
 from .jwt_constants import (
     JWT_ACCESS_MAX_AGE, JWT_REFRESH_MAX_AGE,
     JWT_DEFAULT_ALGORITHM, JWT_DECODING_KEY,
-    JWT_DB_ENGINE, JWT_DB_TABLE,
-    JWT_DB_COL_ACCOUNT, JWT_DB_COL_HASH, JWT_DB_COL_TOKEN
+    JWT_DB_ENGINE, JWT_DB_TABLE, JWT_DB_COL_HASH
 )
 from .jwt_data import JwtData
 
@@ -186,6 +185,17 @@ def jwt_validate_token(errors: list[str] | None,
         if nature and nature != claims.get("nat"):
             nat: str = "an access" if nature == "A" else "a refresh"
             err_msg = f"Token is not {nat} token"
+        elif JWT_DB_ENGINE and claims.get("nat") == "R":
+            from pypomes_db import db_exists
+            # ruff: noqa: S324
+            hasher = hashlib.new(name="md5",
+                                 data=token.encode())
+            token_hash: str = hasher.digest().hex()
+            if not db_exists(errors=errors,
+                             table=JWT_DB_TABLE,
+                             where_data={JWT_DB_COL_HASH: token_hash},
+                             logger=logger):
+                err_msg = "Token is not valid"
     except Exception as e:
         err_msg = str(e)
 
@@ -287,19 +297,21 @@ def jwt_get_tokens(errors: list[str] | None,
     if refresh_token:
         # verify whether this refresh token is legitimate
         if JWT_DB_ENGINE:
-            from pypomes_db import db_select
-            recs: list[tuple[str]] = db_select(errors=op_errors,
-                                               sel_stmt=f"SELECT {JWT_DB_COL_TOKEN} "
-                                                        f"FROM {JWT_DB_TABLE}",
-                                               where_data={JWT_DB_COL_ACCOUNT: account_id},
-                                               logger=logger)
-            if not op_errors and \
-                    (len(recs) == 0 or recs[0][0] != refresh_token):
+            from pypomes_db import db_exists
+            # ruff: noqa: S324
+            hasher = hashlib.new(name="md5",
+                                 data=refresh_token.encode())
+            token_hash: str = hasher.digest().hex()
+            if db_exists(errors=op_errors,
+                         table=JWT_DB_TABLE,
+                         where_data={JWT_DB_COL_HASH: token_hash},
+                         logger=logger) is False:
                 op_errors.append("Invalid refresh token")
+
         if not op_errors:
             account_claims = jwt_get_claims(errors=op_errors,
                                             token=refresh_token)
-            if not op_errors and account_claims.get("nat") != "R":
+            if not op_errors and (account_claims.get("payload") or {}).get("nat") != "R":
                 op_errors.append("Invalid parameters")
 
     if not op_errors:

{pypomes_jwt-0.8.1.dist-info → pypomes_jwt-0.8.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pypomes_jwt
-Version: 0.8.1
+Version: 0.8.2
 Summary: A collection of Python pomes, penyeach (JWT module)
 Project-URL: Homepage, https://github.com/TheWiseCoder/PyPomes-JWT
 Project-URL: Bug Tracker, https://github.com/TheWiseCoder/PyPomes-JWT/issues

pypomes_jwt-0.8.2.dist-info/RECORD

@@ -0,0 +1,8 @@
+pypomes_jwt/__init__.py,sha256=06WdwiP2m5jtrFjpPSacg4fRd2Dh6gVo93xJhmu73J4,1134
+pypomes_jwt/jwt_constants.py,sha256=EjdrTP5AptGoOdI0gzsxexmM4lrgm2r0KHX-DyyGhFc,4330
+pypomes_jwt/jwt_data.py,sha256=d11IsRLKF7_3RTfm5ju-U--eCHJemD50OzQBOzFNtYQ,19243
+pypomes_jwt/jwt_pomes.py,sha256=hsWrlq_9OqcScS1fPKFl5yxxjicj_AAE2Z5NfKicDkw,15686
+pypomes_jwt-0.8.2.dist-info/METADATA,sha256=gHPs2FSSALkn4gsXnCXnbNBIjDYt7a4QxMY11NYBvb8,599
+pypomes_jwt-0.8.2.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+pypomes_jwt-0.8.2.dist-info/licenses/LICENSE,sha256=NdakochSXm_H_-DSL_x2JlRCkYikj3snYYvTwgR5d_c,1086
+pypomes_jwt-0.8.2.dist-info/RECORD,,

pypomes_jwt-0.8.1.dist-info/RECORD

@@ -1,8 +0,0 @@
-pypomes_jwt/__init__.py,sha256=06WdwiP2m5jtrFjpPSacg4fRd2Dh6gVo93xJhmu73J4,1134
-pypomes_jwt/jwt_constants.py,sha256=EjdrTP5AptGoOdI0gzsxexmM4lrgm2r0KHX-DyyGhFc,4330
-pypomes_jwt/jwt_data.py,sha256=q4KUVOuLXHA9tVIfuVEPo8uZPulElWM04wqtGVxcV-0,19239
-pypomes_jwt/jwt_pomes.py,sha256=lACMvNHRVpGgOGmQJ67zbURnR6p4kcxU4UomoZYahto,15246
-pypomes_jwt-0.8.1.dist-info/METADATA,sha256=g4cWSIxewY90pfkQ2gLJlLdE_LqHeX2E6mU2CfX0eak,599
-pypomes_jwt-0.8.1.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-pypomes_jwt-0.8.1.dist-info/licenses/LICENSE,sha256=NdakochSXm_H_-DSL_x2JlRCkYikj3snYYvTwgR5d_c,1086
-pypomes_jwt-0.8.1.dist-info/RECORD,,