pypomes-jwt 1.0.9__tar.gz → 1.1.1__tar.gz

{pypomes_jwt-1.0.9 → pypomes_jwt-1.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pypomes_jwt
-Version: 1.0.9
+Version: 1.1.1
 Summary: A collection of Python pomes, penyeach (JWT module)
 Project-URL: Homepage, https://github.com/TheWiseCoder/PyPomes-JWT
 Project-URL: Bug Tracker, https://github.com/TheWiseCoder/PyPomes-JWT/issues
@@ -12,5 +12,5 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Requires-Dist: cryptography>=44.0.2
 Requires-Dist: pyjwt>=2.10.1
-Requires-Dist: pypomes-core>=1.9.4
-Requires-Dist: pypomes-db>=2.0.8
+Requires-Dist: pypomes-core>=1.9.8
+Requires-Dist: pypomes-db>=2.0.9

{pypomes_jwt-1.0.9 → pypomes_jwt-1.1.1}/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pypomes_jwt"
-version = "1.0.9"
+version = "1.1.1"
 authors = [
   { name="GT Nunes", email="wisecoder01@gmail.com" }
 ]
@@ -21,8 +21,8 @@ classifiers = [
 dependencies = [
     "PyJWT>=2.10.1",
     "cryptography>=44.0.2",
-    "pypomes_core>=1.9.4",
-    "pypomes_db>=2.0.8"
+    "pypomes_core>=1.9.8",
+    "pypomes_db>=2.0.9"
 ]
 
 [project.urls]

{pypomes_jwt-1.0.9 → pypomes_jwt-1.1.1}/src/pypomes_jwt/__init__.py

@@ -1,5 +1,5 @@
-from .jwt_constants import (
-    JwtParam, JwtDbParam
+from .jwt_configuration import (
+    JwtConfig, JwtDbConfig
 )
 from .jwt_pomes import (
     jwt_needed, jwt_verify_request,
@@ -10,7 +10,7 @@ from .jwt_pomes import (
 
 __all__ = [
     # jwt_constants
-    "JwtParam", "JwtDbParam",
+    "JwtConfig", "JwtDbConfig",
     # jwt_pomes
     "jwt_needed", "jwt_verify_request",
     "jwt_assert_account", "jwt_set_account", "jwt_remove_account",

pypomes_jwt-1.1.1/src/pypomes_jwt/jwt_configuration.py

@@ -0,0 +1,85 @@
+from cryptography.hazmat.primitives import serialization
+from cryptography.hazmat.primitives.asymmetric import rsa
+from cryptography.hazmat.primitives.asymmetric.rsa import RSAPrivateKey, RSAPublicKey
+from enum import Enum
+from pypomes_core import (
+    APP_PREFIX,
+    env_get_str, env_get_bytes, env_get_int
+)
+from pypomes_db import DbEngine, db_setup
+from secrets import token_bytes
+from sys import stderr
+
+
+# recommended: allow the encode and decode keys to be generated anew when app starts
+_encoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_ENCODING_KEY",
+                                     encoding="base64url")
+_decoding_key: bytes
+# one of HS256, HS512, RS256, RS512
+_default_algorithm: str = env_get_str(key=f"{APP_PREFIX}_JWT_DEFAULT_ALGORITHM",
+                                      def_value="RS256")
+if _default_algorithm in ["HS256", "HS512"]:
+    if not _encoding_key:
+        _encoding_key = token_bytes(nbytes=32)
+    _decoding_key = _encoding_key
+else:
+    _decoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_DECODING_KEY")
+    if not _encoding_key or not _decoding_key:
+        __priv_key: RSAPrivateKey = rsa.generate_private_key(public_exponent=65537,
+                                                             key_size=2048)
+        _encoding_key = __priv_key.private_bytes(encoding=serialization.Encoding.PEM,
+                                                 format=serialization.PrivateFormat.PKCS8,
+                                                 encryption_algorithm=serialization.NoEncryption())
+        __pub_key: RSAPublicKey = __priv_key.public_key()
+        _decoding_key = __pub_key.public_bytes(encoding=serialization.Encoding.PEM,
+                                               format=serialization.PublicFormat.SubjectPublicKeyInfo)
+
+
+class JwtConfig(Enum):
+    """
+    Parameters for JWT token issuance.
+    """
+    # recommended: between 5 min and 1 hour (set to 5 min)
+    ACCESS_MAX_AGE: int = env_get_int(key=f"{APP_PREFIX}_JWT_ACCESS_MAX_AGE",
+                                      def_value=300)
+    ACCOUNT_LIMIT: int = env_get_int(key=f"{APP_PREFIX}_JWT_ACCOUNT_LIMIT",
+                                     def_value=5)
+    ENCODING_KEY: bytes = _encoding_key
+    DECODING_KEY: bytes = _decoding_key
+    DEFAULT_ALGORITHM: str = _default_algorithm
+    # recommended: at least 2 hours (set to 24 hours)
+    REFRESH_MAX_AGE: int = env_get_int(key=f"{APP_PREFIX}_JWT_REFRESH_MAX_AGE",
+                                       def_value=86400)
+
+
+class JwtDbConfig(Enum):
+    """
+    Parameters for JWT databse connection.
+    """
+    ENGINE: str = DbEngine(env_get_str(key=f"{APP_PREFIX}_JWT_DB_ENGINE"))
+    CLIENT: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_CLIENT")  # for Oracle, only
+    DRIVER: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_DRIVER")  # for SQLServer, only
+    NAME: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_NAME")
+    HOST: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_HOST")
+    PORT: int = env_get_int(key=f"{APP_PREFIX}_JWT_DB_PORT")
+    USER: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_USER")
+    PWD: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_PWD")
+    TABLE: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_TABLE")
+    COL_ACCOUNT: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_ACCOUNT")
+    COL_ALGORITHM: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_ALGORITHM")
+    COL_DECODER: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_DECODER")
+    COL_KID: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_KID")
+    COL_TOKEN: str = env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_TOKEN")
+
+
+# define and validate the database engine
+# noinspection PyTypeChecker
+if not db_setup(engine=DbEngine(JwtDbConfig.ENGINE),
+                db_name=JwtDbConfig.NAME,
+                db_user=JwtDbConfig.USER,
+                db_pwd=JwtDbConfig.PWD,
+                db_host=JwtDbConfig.HOST,
+                db_port=JwtDbConfig.PORT,
+                db_client=JwtDbConfig.CLIENT,
+                db_driver=JwtDbConfig.DRIVER):
+    stderr.write("Invalid database parameters\n")

{pypomes_jwt-1.0.9 → pypomes_jwt-1.1.1}/src/pypomes_jwt/jwt_pomes.py

@@ -9,9 +9,7 @@ from pypomes_db import (
 )
 from typing import Any
 
-from .jwt_constants import (
-    JwtParam, JwtDbParam, _JWT_CONFIG, _JWT_DATABASE
-)
+from .jwt_configuration import JwtConfig, JwtDbConfig
 from .jwt_registry import JwtRegistry
 
 # the JWT registry
@@ -77,8 +75,8 @@ def jwt_assert_account(account_id: str) -> bool:
 
 def jwt_set_account(account_id: str,
                     claims: dict[str, Any],
-                    access_max_age: int = _JWT_CONFIG[JwtParam.ACCESS_MAX_AGE],
-                    refresh_max_age: int = _JWT_CONFIG[JwtParam.REFRESH_MAX_AGE],
+                    access_max_age: int = JwtConfig.ACCESS_MAX_AGE,
+                    refresh_max_age: int = JwtConfig.REFRESH_MAX_AGE,
                     grace_interval: int = None,
                     logger: Logger = None) -> None:
     """
@@ -180,14 +178,14 @@ def jwt_validate_token(errors: list[str] | None,
                 token_kid[0:1] in ["A", "R"] and token_kid[1:].isdigit():
             # token was likely issued locally
             where_data: dict[str, Any] = {
-                _JWT_DATABASE[JwtDbParam.COL_KID]: int(token_kid[1:])
+                str(JwtDbConfig.COL_KID): int(token_kid[1:])
             }
             if account_id:
-                where_data[_JWT_DATABASE[JwtDbParam.COL_ACCOUNT]] = account_id
+                where_data[str(JwtDbConfig.COL_ACCOUNT)] = account_id
             recs: list[tuple[str]] = db_select(errors=op_errors,
-                                               sel_stmt=f"SELECT {_JWT_DATABASE[JwtDbParam.COL_ALGORITHM]}, "
-                                                        f"{_JWT_DATABASE[JwtDbParam.COL_DECODER]} "
-                                                        f"FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
+                                               sel_stmt=f"SELECT {JwtDbConfig.COL_ALGORITHM}, "
+                                                        f"{JwtDbConfig.COL_DECODER} "
+                                                        f"FROM {JwtDbConfig.TABLE}",
                                                where_data=where_data,
                                                logger=logger)
             if recs:
@@ -201,8 +199,10 @@ def jwt_validate_token(errors: list[str] | None,
                     logger.error(msg="Token not in the database")
                 op_errors.append("Invalid token")
         else:
-            token_alg = _JWT_CONFIG[JwtParam.DEFAULT_ALGORITHM]
-            token_decoder = _JWT_CONFIG[JwtParam.DECODING_KEY]
+            # noinspection PyTypeChecker
+            token_alg = JwtConfig.DEFAULT_ALGORITHM
+            # noinspection PyTypeChecker
+            token_decoder = JwtConfig.DECODING_KEY
 
         # validate the token
         if not op_errors:
@@ -282,10 +282,10 @@ def jwt_revoke_token(errors: list[str] | None,
             op_errors.append("Invalid token")
         else:
             db_delete(errors=op_errors,
-                      delete_stmt=f"DELETE FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
+                      delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
                       where_data={
-                          _JWT_DATABASE[JwtDbParam.COL_KID]: int(token_kid[1:]),
-                          _JWT_DATABASE[JwtDbParam.COL_ACCOUNT]: account_id
+                          str(JwtDbConfig.COL_KID): int(token_kid[1:]),
+                          str(JwtDbConfig.COL_ACCOUNT): account_id
                       },
                       logger=logger)
     if op_errors:
@@ -456,10 +456,10 @@ def jwt_refresh_tokens(errors: list[str] | None,
             if db_conn:
                 # delete current refresh token
                 db_delete(errors=op_errors,
-                          delete_stmt=f"DELETE FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
+                          delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
                           where_data={
-                              _JWT_DATABASE[JwtDbParam.COL_KID]: int(token_kid[1:]),
-                              _JWT_DATABASE[JwtDbParam.COL_ACCOUNT]: account_id
+                              str(JwtDbConfig.COL_KID): int(token_kid[1:]),
+                              str(JwtDbConfig.COL_ACCOUNT): account_id
                           },
                           connection=db_conn,
                           committable=False,

{pypomes_jwt-1.0.9 → pypomes_jwt-1.1.1}/src/pypomes_jwt/jwt_registry.py

@@ -12,9 +12,7 @@ from pypomes_db import (
 from threading import Lock
 from typing import Any
 
-from .jwt_constants import (
-    JwtParam, JwtDbParam, _JWT_CONFIG, _JWT_DATABASE
-)
+from .jwt_configuration import JwtConfig, JwtDbConfig
 
 
 class JwtRegistry:
@@ -141,8 +139,8 @@ class JwtRegistry:
 
         # remove from database
         db_delete(errors=None,
-                  delete_stmt=f"DELETE FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
-                  where_data={_JWT_DATABASE[JwtDbParam.COL_ACCOUNT]: account_id},
+                  delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
+                  where_data={str(JwtDbConfig.COL_ACCOUNT): account_id},
                   logger=logger)
         if logger:
             if account_data:
@@ -216,8 +214,8 @@ class JwtRegistry:
                                                                tz=timezone.utc).isoformat()
         # may raise an exception
         return jwt.encode(payload=current_claims,
-                          key=_JWT_CONFIG[JwtParam.ENCODING_KEY],
-                          algorithm=_JWT_CONFIG[JwtParam.DEFAULT_ALGORITHM],
+                          key=JwtConfig.ENCODING_KEY,
+                          algorithm=JwtConfig.DEFAULT_ALGORITHM,
                           headers={"kid": nature})
 
     def issue_tokens(self,
@@ -277,8 +275,8 @@ class JwtRegistry:
                                                                    tz=timezone.utc).isoformat()
             # may raise an exception
             refresh_token: str = jwt.encode(payload=current_claims,
-                                            key=_JWT_CONFIG[JwtParam.ENCODING_KEY],
-                                            algorithm=_JWT_CONFIG[JwtParam.DEFAULT_ALGORITHM],
+                                            key=JwtConfig.ENCODING_KEY,
+                                            algorithm=JwtConfig.DEFAULT_ALGORITHM,
                                             headers={"kid": "R0"})
 
             # make sure to have a database connection
@@ -293,14 +291,14 @@ class JwtRegistry:
                                                    logger=logger)
                 # issue the definitive refresh token
                 refresh_token = jwt.encode(payload=current_claims,
-                                           key=_JWT_CONFIG[JwtParam.ENCODING_KEY],
-                                           algorithm=_JWT_CONFIG[JwtParam.DEFAULT_ALGORITHM],
+                                           key=JwtConfig.ENCODING_KEY,
+                                           algorithm=JwtConfig.DEFAULT_ALGORITHM,
                                            headers={"kid": f"R{token_id}"})
                 # persist it
                 db_update(errors=errors,
-                          update_stmt=f"UPDATE {_JWT_DATABASE[JwtDbParam.TABLE]}",
-                          update_data={_JWT_DATABASE[JwtDbParam.COL_TOKEN]: refresh_token},
-                          where_data={_JWT_DATABASE[JwtDbParam.COL_KID]: token_id},
+                          update_stmt=f"UPDATE {JwtDbConfig.TABLE}",
+                          update_data={str(JwtDbConfig.COL_TOKEN): refresh_token},
+                          where_data={str(JwtDbConfig.COL_KID): token_id},
                           connection=curr_conn,
                           committable=False,
                           logger=logger)
@@ -322,8 +320,8 @@ class JwtRegistry:
             current_claims["exp"] = just_now + account_data.get("access-max-age")
             # may raise an exception
             access_token: str = jwt.encode(payload=current_claims,
-                                           key=_JWT_CONFIG[JwtParam.ENCODING_KEY],
-                                           algorithm=_JWT_CONFIG[JwtParam.DEFAULT_ALGORITHM],
+                                           key=JwtConfig.ENCODING_KEY,
+                                           algorithm=JwtConfig.DEFAULT_ALGORITHM,
                                            headers={"kid": f"A{token_id}"})
             # return the token data
             return {
@@ -381,9 +379,9 @@ def _jwt_persist_token(account_id: str,
     # noinspection PyTypeChecker
     recs: list[tuple[int, str, str, str]] = \
         db_select(errors=errors,
-                  sel_stmt=f"SELECT {_JWT_DATABASE[JwtDbParam.COL_KID]}, {_JWT_DATABASE[JwtDbParam.COL_TOKEN]} "
-                           f"FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
-                  where_data={_JWT_DATABASE[JwtDbParam.COL_ACCOUNT]: account_id},
+                  sel_stmt=f"SELECT {JwtDbConfig.COL_KID}, {JwtDbConfig.COL_TOKEN} "
+                           f"FROM {JwtDbConfig.TABLE}",
+                  where_data={str(JwtDbConfig.COL_ACCOUNT): account_id},
                   connection=db_conn,
                   committable=False,
                   logger=logger)
@@ -424,8 +422,8 @@ def _jwt_persist_token(account_id: str,
     # remove expired tokens from persistence
     if expired:
         db_delete(errors=errors,
-                  delete_stmt=f"DELETE FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
-                  where_data={_JWT_DATABASE[JwtDbParam.COL_KID]: expired},
+                  delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
+                  where_data={str(JwtDbConfig.COL_KID): expired},
                   connection=db_conn,
                   committable=False,
                   logger=logger)
@@ -435,11 +433,12 @@ def _jwt_persist_token(account_id: str,
             logger.debug(msg=f"{len(expired)} tokens of account "
                              f"'{account_id}' removed from storage")
 
-    if 0 < _JWT_CONFIG[JwtParam.ACCOUNT_LIMIT] <= len(recs) - len(expired):
+    # noinspection PyTypeChecker
+    if 0 < JwtConfig.ACCOUNT_LIMIT <= len(recs) - len(expired):
         # delete the oldest token to make way for the new one
         db_delete(errors=errors,
-                  delete_stmt=f"DELETE FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
-                  where_data={_JWT_DATABASE[JwtDbParam.COL_KID]: oldest_id},
+                  delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
+                  where_data={str(JwtDbConfig.COL_KID): oldest_id},
                   connection=db_conn,
                   committable=False,
                   logger=logger)
@@ -449,13 +448,14 @@ def _jwt_persist_token(account_id: str,
             logger.debug(msg="Oldest active token of account "
                              f"'{account_id}' removed from storage")
     # persist token
+    # noinspection PyTypeChecker
     db_insert(errors=errors,
-              insert_stmt=f"INSERT INTO {_JWT_DATABASE[JwtDbParam.TABLE]}",
+              insert_stmt=f"INSERT INTO {JwtDbConfig.TABLE}",
               insert_data={
-                  _JWT_DATABASE[JwtDbParam.COL_ACCOUNT]: account_id,
-                  _JWT_DATABASE[JwtDbParam.COL_TOKEN]: jwt_token,
-                  _JWT_DATABASE[JwtDbParam.COL_ALGORITHM]: _JWT_CONFIG[JwtParam.DEFAULT_ALGORITHM],
-                  _JWT_DATABASE[JwtDbParam.COL_DECODER]: urlsafe_b64encode(_JWT_CONFIG[JwtParam.DECODING_KEY]).decode()
+                  str(JwtDbConfig.COL_ACCOUNT): account_id,
+                  str(JwtDbConfig.COL_TOKEN): jwt_token,
+                  str(JwtDbConfig.COL_ALGORITHM): JwtConfig.DEFAULT_ALGORITHM,
+                  str(JwtDbConfig.COL_DECODER): urlsafe_b64encode(s=JwtConfig.DECODING_KEY).decode()
               },
               connection=db_conn,
               committable=False,
@@ -467,13 +467,13 @@ def _jwt_persist_token(account_id: str,
     # HAZARD: JWT_DB_COL_TOKEN's column type might prevent it for being used in a WHERE clause
     where_clause: str | None = None
     if existing_ids:
-        where_clause = f"{_JWT_DATABASE[JwtDbParam.COL_KID]} NOT IN {existing_ids}"
+        where_clause = f"{JwtDbConfig.COL_KID} NOT IN {existing_ids}"
         where_clause = where_clause.replace("[", "(", 1).replace("]", ")", 1)
     reply: list[tuple[int]] = db_select(errors=errors,
-                                        sel_stmt=f"SELECT {_JWT_DATABASE[JwtDbParam.COL_KID]} "
-                                                 f"FROM {_JWT_DATABASE[JwtDbParam.TABLE]}",
+                                        sel_stmt=f"SELECT {JwtDbConfig.COL_KID} "
+                                                 f"FROM {JwtDbConfig.TABLE}",
                                         where_clause=where_clause,
-                                        where_data={_JWT_DATABASE[JwtDbParam.COL_ACCOUNT]: account_id},
+                                        where_data={str(JwtDbConfig.COL_ACCOUNT): account_id},
                                         require_count=1,
                                         connection=db_conn,
                                         committable=False,

pypomes_jwt-1.0.9/src/pypomes_jwt/jwt_constants.py

@@ -1,116 +0,0 @@
-from cryptography.hazmat.primitives import serialization
-from cryptography.hazmat.primitives.asymmetric import rsa
-from cryptography.hazmat.primitives.asymmetric.rsa import RSAPrivateKey, RSAPublicKey
-from enum import StrEnum
-from pypomes_core import (
-    APP_PREFIX,
-    env_get_str, env_get_bytes, env_get_int
-)
-from pypomes_db import DbEngine, db_setup
-from secrets import token_bytes
-from sys import stderr
-from typing import Any, Final
-
-
-class JwtParam(StrEnum):
-    """
-    Parameters for JWT provider access.
-    """
-    ACCESS_MAX_AGE = "access-max-age"
-    ACCOUNT_LIMIT = "account-limit"
-    DECODING_KEY = "decoding-key"
-    DEFAULT_ALGORITHM = "default-algorithm"
-    ENCODING_KEY = "encoding-key"
-    REFRESH_MAX_AGE = "refresh-max-age"
-
-    def __str__(self) -> str:  # noqa: D105
-        # noinspection PyTypeChecker
-        return self.value
-
-
-class JwtDbParam(StrEnum):
-    """
-    Parameters for JWT databse connection.
-    """
-    CLIENT = "client"
-    DRIVER = "driver"
-    ENGINE = "engine"
-    NAME = "name"
-    HOST = "host"
-    PORT = "port"
-    USER = "user"
-    PWD = "pwd"
-    TABLE = "table"
-    COL_ACCOUNT = "col-account"
-    COL_ALGORITHM = "col-algorithm"
-    COL_DECODER = "col-decoder"
-    COL_KID = "col-kid"
-    COL_TOKEN = "col-token"
-
-    def __str__(self) -> str:  # noqa: D105
-        # noinspection PyTypeChecker
-        return self.value
-
-
-# recommended: allow the encode and decode keys to be generated anew when app starts
-__encoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_ENCODING_KEY",
-                                      encoding="base64url")
-__decoding_key: bytes
-# one of HS256, HS512, RS256, RS512
-__default_algorithm: str = env_get_str(key=f"{APP_PREFIX}_JWT_DEFAULT_ALGORITHM",
-                                       def_value="RS256")
-if __default_algorithm in ["HS256", "HS512"]:
-    if not __encoding_key:
-        __encoding_key = token_bytes(nbytes=32)
-    __decoding_key = __encoding_key
-else:
-    __decoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_DECODING_KEY")
-    if not __encoding_key or not __decoding_key:
-        __priv_key: RSAPrivateKey = rsa.generate_private_key(public_exponent=65537,
-                                                             key_size=2048)
-        __encoding_key = __priv_key.private_bytes(encoding=serialization.Encoding.PEM,
-                                                  format=serialization.PrivateFormat.PKCS8,
-                                                  encryption_algorithm=serialization.NoEncryption())
-        __pub_key: RSAPublicKey = __priv_key.public_key()
-        __decoding_key = __pub_key.public_bytes(encoding=serialization.Encoding.PEM,
-                                                format=serialization.PublicFormat.SubjectPublicKeyInfo)
-
-_JWT_CONFIG: Final[dict[JwtParam, Any]] = {
-    # recommended: between 5 min and 1 hour (set to 5 min)
-    JwtParam.ACCESS_MAX_AGE: env_get_int(key=f"{APP_PREFIX}_JWT_ACCESS_MAX_AGE",
-                                         def_value=300),
-    JwtParam.ACCOUNT_LIMIT: env_get_int(key=f"{APP_PREFIX}_JWT_ACCOUNT_LIMIT"),
-    JwtParam.DECODING_KEY: __decoding_key,
-    JwtParam.DEFAULT_ALGORITHM: __default_algorithm,
-    JwtParam.ENCODING_KEY: __encoding_key,
-    # recommended: at least 2 hours (set to 24 hours)
-    JwtParam.REFRESH_MAX_AGE: env_get_int(key=f"{APP_PREFIX}_JWT_REFRESH_MAX_AGE",
-                                          def_value=86400)
-}
-_JWT_DATABASE: Final[JwtDbParam, Any] = {
-    JwtDbParam.ENGINE: DbEngine(env_get_str(key=f"{APP_PREFIX}_JWT_DB_ENGINE")),
-    JwtDbParam.CLIENT: env_get_str(key=f"{APP_PREFIX}_JWT_DB_CLIENT"),  # for Oracle, only
-    JwtDbParam.DRIVER: env_get_str(key=f"{APP_PREFIX}_JWT_DB_DRIVER"),  # for SQLServer, only
-    JwtDbParam.NAME: env_get_str(key=f"{APP_PREFIX}_JWT_DB_NAME"),
-    JwtDbParam.HOST: env_get_str(key=f"{APP_PREFIX}_JWT_DB_HOST"),
-    JwtDbParam.PORT: env_get_int(key=f"{APP_PREFIX}_JWT_DB_PORT"),
-    JwtDbParam.USER: env_get_str(key=f"{APP_PREFIX}_JWT_DB_USER"),
-    JwtDbParam.PWD: env_get_str(key=f"{APP_PREFIX}_JWT_DB_PWD"),
-    JwtDbParam.TABLE:  env_get_str(key=f"{APP_PREFIX}_JWT_DB_TABLE"),
-    JwtDbParam.COL_ACCOUNT: env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_ACCOUNT"),
-    JwtDbParam.COL_ALGORITHM: env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_ALGORITHM"),
-    JwtDbParam.COL_DECODER: env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_DECODER"),
-    JwtDbParam.COL_KID: env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_KID"),
-    JwtDbParam.COL_TOKEN: env_get_str(key=f"{APP_PREFIX}_JWT_DB_COL_TOKEN")
-}
-
-# define and validate the database engine
-if not db_setup(engine=_JWT_DATABASE[JwtDbParam.ENGINE],
-                db_name=_JWT_DATABASE[JwtDbParam.NAME],
-                db_user=_JWT_DATABASE[JwtDbParam.USER],
-                db_pwd=_JWT_DATABASE[JwtDbParam.PWD],
-                db_host=_JWT_DATABASE[JwtDbParam.HOST],
-                db_port=_JWT_DATABASE[JwtDbParam.PORT],
-                db_client=_JWT_DATABASE[JwtDbParam.CLIENT],
-                db_driver=_JWT_DATABASE[JwtDbParam.DRIVER]):
-    stderr.write("Invalid database parameters\n")