Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Misc improvements of the JWT auth support #1410

Merged
merged 5 commits into from
Jan 8, 2025

Conversation

garberg
Copy link
Member

@garberg garberg commented Jan 8, 2025

Misc improvements of the JWT auth support:

  • Make group claim name configurable (previously hard-coded to "group")
  • Add support for bearer token auth in pynipap
  • Cache signing keys
  • Improvements to error handling

Make the group claim name configurable in the JWT authentication module.
Also improved error handling by raising errors which will propagate to
the client instead of only logging locally and silently fail
authentication.
Made it possible to use bearer token auth with pynipap.
With the newer version of pyjwt comes a helper class, PyJWKClient, to
simplify fetching (and caching) signing keys. A shared instance is added
as a class variable.
@garberg garberg merged commit 274d899 into SpriteLink:master Jan 8, 2025
6 checks passed
@garberg garberg deleted the misc_jwt branch January 9, 2025 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants