add refresh token view and serializer

README.md

@@ -39,4 +39,15 @@ from auth_protection.authentications import JWTAuthProtection
 
 class SampleView(TARGET_VIEW):
     authentication_classes = [JWTAuthProtection]
+```
+
+- Change your `TokenRefreshView` view to `ProtectTokenRefreshView` (EX: urls.py):
+```python
+from auth_protection.views import ProtectTokenRefreshView
+
+urlpatterns = [
+    # ...
+    path('YOUR_PATH/refresh/', ProtectTokenRefreshView.as_view(), name='URL_NAME'),
+    # ...
+]
 ```

auth_protection/serializers.py

@@ -1,6 +1,11 @@
-from rest_framework_simplejwt.serializers import TokenObtainPairSerializer
-
+from rest_framework_simplejwt.serializers import TokenObtainPairSerializer, TokenRefreshSerializer
+from rest_framework_simplejwt.tokens import RefreshToken
 from auth_protection.utils import get_protect_key
+from django.contrib.auth import get_user_model
+from rest_framework_simplejwt.exceptions import InvalidToken
+from django.utils.translation import gettext_lazy as _
+
+User = get_user_model()
 
 
 class ProtectTokenObtainPairSerializer(TokenObtainPairSerializer):
@@ -14,3 +19,23 @@ def get_token(cls, user):
         token = super().get_token(user)
         token['protect_key'] = get_protect_key(user)
         return token
+
+
+class ProtectTokenRefreshSerializer(TokenRefreshSerializer):
+
+    def validate(self, attr):
+        refresh = RefreshToken(attr['refresh'])
+
+        user = self.get_user(user_id=refresh.get('user_id'))
+
+        if not refresh.get('protect_key') or (refresh.get('protect_key') != get_protect_key(user)):
+            raise InvalidToken(_('Token contained no recognizable user identification'))
+
+        return super(ProtectTokenRefreshSerializer, self).validate(attr)
+
+    def get_user(self, user_id):
+        try:
+            user = User.objects.get(id=user_id)
+        except User.DoesNotExist:
+            raise InvalidToken(_('Token contained no recognizable user identification'))
+        return user

auth_protection/views.py

@@ -1,3 +1,11 @@
-from django.shortcuts import render
+from rest_framework_simplejwt.views import TokenRefreshView
 
-# Create your views here.
+from auth_protection.serializers import ProtectTokenRefreshSerializer
+
+
+class ProtectTokenRefreshView(TokenRefreshView):
+    """
+        Takes a refresh type JSON web token and returns an access type JSON web
+        token if the refresh token is valid.
+        """
+    serializer_class = ProtectTokenRefreshSerializer

setup.py

@@ -9,7 +9,7 @@
 
 setup(
     name='django-auth-protection',
-    version='1.0.2',
+    version='1.0.3',
     zip_safe=False,
     packages=find_packages(),
     include_package_data=True,