pypomes-jwt 1.3.2__tar.gz → 1.3.3__tar.gz

{pypomes_jwt-1.3.2 → pypomes_jwt-1.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pypomes_jwt
-Version: 1.3.2
+Version: 1.3.3
 Summary: A collection of Python pomes, penyeach (JWT module)
 Project-URL: Homepage, https://github.com/TheWiseCoder/PyPomes-JWT
 Project-URL: Bug Tracker, https://github.com/TheWiseCoder/PyPomes-JWT/issues

{pypomes_jwt-1.3.2 → pypomes_jwt-1.3.3}/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pypomes_jwt"
-version = "1.3.2"
+version = "1.3.3"
 authors = [
   { name="GT Nunes", email="wisecoder01@gmail.com" }
 ]

{pypomes_jwt-1.3.2 → pypomes_jwt-1.3.3}/src/pypomes_jwt/jwt_config.py

@@ -21,8 +21,9 @@ class JwtAlgorithm(StrEnum):
 
 # recommended: allow the encode and decode keys to be generated anew when app starts
 _encoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_ENCODING_KEY",
-                                     encoding="base64url")
-_decoding_key: bytes
+                                     encoding="base64")
+_decoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_DECODING_KEY")
+# default algorithm may cause encode and decode keys to be overriden
 _default_algorithm: JwtAlgorithm = env_get_enum(key=f"{APP_PREFIX}_JWT_DEFAULT_ALGORITHM",
                                                 enum_class=JwtAlgorithm,
                                                 def_value=JwtAlgorithm.RS256)
@@ -30,17 +31,16 @@ if _default_algorithm in [JwtAlgorithm.HS256, JwtAlgorithm.HS512]:
     if not _encoding_key:
         _encoding_key = token_bytes(nbytes=32)
     _decoding_key = _encoding_key
-else:
-    _decoding_key: bytes = env_get_bytes(key=f"{APP_PREFIX}_JWT_DECODING_KEY")
-    if not _encoding_key or not _decoding_key:
-        __priv_key: RSAPrivateKey = rsa.generate_private_key(public_exponent=65537,
-                                                             key_size=2048)
-        _encoding_key = __priv_key.private_bytes(encoding=serialization.Encoding.PEM,
-                                                 format=serialization.PrivateFormat.PKCS8,
-                                                 encryption_algorithm=serialization.NoEncryption())
-        __pub_key: RSAPublicKey = __priv_key.public_key()
-        _decoding_key = __pub_key.public_bytes(encoding=serialization.Encoding.PEM,
-                                               format=serialization.PublicFormat.SubjectPublicKeyInfo)
+elif not _encoding_key or not _decoding_key:
+    __priv_key: RSAPrivateKey = rsa.generate_private_key(public_exponent=65537,
+                                                         key_size=2048
+                                                         if _default_algorithm == JwtAlgorithm.RS256 else 4096)
+    _encoding_key = __priv_key.private_bytes(encoding=serialization.Encoding.PEM,
+                                             format=serialization.PrivateFormat.PKCS8,
+                                             encryption_algorithm=serialization.NoEncryption())
+    __pub_key: RSAPublicKey = __priv_key.public_key()
+    _decoding_key = __pub_key.public_bytes(encoding=serialization.Encoding.PEM,
+                                           format=serialization.PublicFormat.SubjectPublicKeyInfo)
 
 
 class JwtConfig(Enum):