Generate, Sign and verify JWTs using GCP KMS.
GCP-JWT is a library to create and sign tokens using the Google Cloud Platform's Key Management Service. It handles the signing and verification of the token.
- [x] Token Signage
- [x] Signature Verification
- [x] Expiry Verification
- [ ] Auto Rotating Asymmetric Key
- [ ] Batch Token Generation
- [ ] Compression Option
- [ ] Symmetrically Encrypted Layer
- [ ] Pretty API
GCP Roles Needed
To be able to use this library you'll need a GCP service account with at least the following roles:
Why not using GCP integrated auth ?
Some projects require more flexibility, I've also personally came across a case where a company didn't want Google to manage the authentication process. Whether or not this should be used in production is outside the scope of this project.
from google.cloud import kms from gcpjwt.jwt import JWT from gcpjwt.jwt_signer import JWTSigner # Create a client using a json file and initialise an asymmetric signer. client = kms.KeyManagementServiceClient.from_service_account_file('../resources/google.json') signer = JWTSigner(client, 'your-project', 'your-ring-location') # Create a simple JWT without changing any claims. jwt = JWT(signer, 'your-ring', 'your-key') text_token = jwt.token()
pip install gcp-jwt
Note: This project uses the cryptography package which needs to install natives. It might not be compatible with App Engine Standard because of the limited libraries allowed.
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
|Filename, size||File type||Python version||Upload date||Hashes|
|Filename, size gcp_jwt-0.1.9-py3-none-any.whl (17.8 kB)||File type Wheel||Python version py3||Upload date||Hashes View hashes|
|Filename, size gcp-jwt-0.1.9.tar.gz (4.5 kB)||File type Source||Python version None||Upload date||Hashes View hashes|