Skip to main content

JWT Auth Middleware for Django Channels

Project description

django-channels-jwt-auth-middleware

Custom AuthMiddlewareStack to get users from JWT token for Django Channels.

Installation

Simply,

$ pip install django-channels-jwt-auth-middleware

And that it.

Usage

All you have to do is wrap your URLRouter.

from django_channels_jwt_auth_middleware.auth import JWTAuthMiddlewareStack

application = ProtocolTypeRouter({
    "http": get_asgi_application(),
    "websocket": JWTAuthMiddlewareStack(
        URLRouter(
            websocket_urlpatterns,
        )
    ),
})

AuthMiddlewareStack is already in JWTAuthMiddlewareStack. If you want to change this, simply do;

from django_channels_jwt_auth_middleware.auth import JWTAuthMiddleware

from . import YourCustomMiddlewareStack

def CustomJWTAuthMiddlewareStack(app):
    return JWTAuthMiddleware(YourCustomMiddlewareStack(app))

Simply as that :)

Testing

Testing is done by two methods.

  1. automated testing using django's test system.
  2. manual testing by hand.

I have tried testing the middleware through ChannelsLiveServerTestCase, but currently this does not run due to pickle error in multiprocessing package from python.
For this reason no-token test cases were tested using django's test system using a test project, and test cases with jwt token is tested by hand.
Hand testing chrome extension called Browser WebSocket Client was used. B low is a simple evidence from the hand testing.

websocket_connection_with_jwt_token

websocket_connection_with_token_query_param_without_value

websocket_connection_without_token

If you go to testproject/pages/tests.py you will see the consumer that is used for testing.

class TestConsumer(WebsocketConsumer):
    def connect(self):
        self.accept()

    # def disconnect(self, code):
    #     self.disconnect()

    def receive(self, text_data, bytes_data=None):
        context = {
            'message': 'testing consumer',
        }
        user = self.scope['user']
        if (user_id := user.id):
            context.update({'user': str(user_id)})
        else:
            context.update({'user': None})
        self.send(text_data=json.dumps(context))

simply, is a data is passed in to the websocket it will return a user id of None for AnonymousUser.

1.0.0 (2021-01-20)

  • First release on PyPI.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page