drf-pyseto 0.1.0

Django REST Framework authentication using PASETO (pyseto)

drf-pyseto

Simple PASETO (v4.local) authentication for Django REST Framework using pyseto.

Targeted for Django 4.2–6.x and Python 3.10–3.14.

Install

pip install drf-pyseto

Dev Install

pip install -e ".[test]"

Settings

DRF_PYSETO = {
    "KEY": "<32-byte key or base64url>",
    "ACCESS_LIFETIME": 300,  # seconds
    "REFRESH_LIFETIME": 86400,  # seconds
    "USER_ID_FIELD": "id",
    "USER_ID_CLAIM": "user_id",
    "TOKEN_TYPE_CLAIM": "typ",
    "AUTH_HEADER_TYPE": "Bearer",
    # Optional:
    # "ISSUER": "your-service",
    # "AUDIENCE": "your-clients",
}

URLs

from django.urls import path, include

urlpatterns = [
    path("api/auth/", include("drf_pyseto.urls")),
]

DRF Authentication

REST_FRAMEWORK = {
    "DEFAULT_AUTHENTICATION_CLASSES": [
        "drf_pyseto.authentication.PASETOAuthentication",
    ]
}

Endpoints

• POST /token/ with username and password
• POST /token/refresh/ with refresh

Tests

pytest