Yanked

This release has been yanked by its maintainers, and will be ignored by installers, except when explicitly specified.
Consider using release 0.1.2 instead.
Reason given by maintainers: this version has a bug that cause authenticated users return AttributeError

django-channels-jwt-stateless

Stateless JWT authentication middleware for Django Channels. Zero database queries on WebSocket handshake.

Existing Django Channels JWT packages call User.objects.get() on every WebSocket connect. Under burst traffic this saturates the connection pool and causes multi-second stalls. This package verifies the JWT signature and builds a lightweight HandshakeUser from the token claims instead.

Install

pip install django-channels-jwt-stateless

Quick Start

# asgi.py
from channels.routing import ProtocolTypeRouter, URLRouter
from django_channels_jwt_stateless import JWTAuthMiddlewareStack

application = ProtocolTypeRouter({
    "http": django_application,
    "websocket": JWTAuthMiddlewareStack(URLRouter(websocket_urlpatterns)),
})

Works out of the box with djangorestframework-simplejwt defaults (HS256, SECRET_KEY, user_id claim). Pass the token as ?token=<jwt> in the WebSocket URL.

scope["user"]

On a valid token, scope["user"] is a HandshakeUser instance:

Attribute Value
.id / .pk From the JWT user_id claim
.is_anonymous False
.is_authenticated True

On an invalid, expired, or missing token it is AnonymousUser.

Configuration

Optional. Add to settings.py:

CHANNELS_JWT_STATELESS = {
    "ALGORITHM": "HS256",              # default
    "SIGNING_KEY": None,               # defaults to SECRET_KEY
    "USER_ID_CLAIM": "user_id",        # default
    "TOKEN_QUERY_PARAM": "token",      # default
    "IS_BLACKLISTED": None,            # dotted path to (jti) -> bool
    "TOKEN_DECODER": None,             # dotted path to (token) -> dict
    "SUBPROTOCOL_PREFIX": None,        # e.g. "access_token"
}

TOKEN_DECODER and IS_BLACKLISTED accept both sync and async callables.

Token Blacklisting

# myapp/auth.py
from django.core.cache import cache

async def is_blacklisted(jti: str) -> bool:
    return await cache.aget(f"blacklist:{jti}") is not None

# settings.py
CHANNELS_JWT_STATELESS = {
    "IS_BLACKLISTED": "myapp.auth.is_blacklisted",
}

Subprotocol Auth

To avoid leaking tokens in query strings:

CHANNELS_JWT_STATELESS = {"SUBPROTOCOL_PREFIX": "access_token"}

Client sends Sec-WebSocket-Protocol: access_token.<jwt>.

Compatibility

Python 3.10+, Django 4.2+, Channels 4+, PyJWT 2+.

License

MIT

Project links

Data verified by PyPI on Aug 12, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
  • Yanked:
Newer release available (0.1.2)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for zhaoxinnZ from gravatar.com zhaoxinnZ

Credits

Author: zxzinn

GitHub Statistics

Data verified by PyPI on Aug 12, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.10

Provides Extra

dev

Tags

authentication channels django jwt stateless websocket

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

django_channels_jwt_stateless-0.1.0.tar.gz (6.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

django_channels_jwt_stateless-0.1.0-py3-none-any.whl (6.9 kB view details)

Uploaded Python 3

File details

Details for the file django_channels_jwt_stateless-0.1.0.tar.gz.

File metadata

File hashes

Hashes for django_channels_jwt_stateless-0.1.0.tar.gz
Algorithm Hash digest
SHA256 3be7c6a588a67435e5e7218c58b6f732ffd650f9f154b73899125e96f7fef84a
MD5 a417d9bb1639121d0bfa871cb10f7473
BLAKE2b-256 5313526b957d35067601ab40c81e8fb920b0e1a273a7e8821e73857faa922c72

See more details on using hashes here.

Provenance

The following attestation bundles were made for django_channels_jwt_stateless-0.1.0.tar.gz:

Publisher: publish.yml on zxzinn/django-channels-jwt-stateless

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file django_channels_jwt_stateless-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for django_channels_jwt_stateless-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 687049fdd4dc6b967531a6bee1cf037c96b173700b13751c83f73011b018753d
MD5 4a4445dc01e1cb9852efb3bb65da36c1
BLAKE2b-256 6fd35ce17750b07825d45a7995dc960de1d6e4708f58039e7f198843663fc58b

See more details on using hashes here.

Provenance

The following attestation bundles were made for django_channels_jwt_stateless-0.1.0-py3-none-any.whl:

Publisher: publish.yml on zxzinn/django-channels-jwt-stateless

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.2

2 files

0.1.1

2 files

This release
Yanked

0.1.0 This release

2 files

Yanked reason: this version has a bug that cause authenticated users return AttributeError

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page