{"repo":"ssaavedra/drf-jwt-knox","free":true,"listed":false,"github":"https://github.com/ssaavedra/drf-jwt-knox","clone":"git clone https://github.com/ssaavedra/drf-jwt-knox.git","description":"Django REST Framework JWT-based Authentication with Server-Side Tokens.","language":"Python","stars":10,"topics":["knox","jwt","django-rest-framework","hardening"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"DRF JWT + Knox ============== This package provides an authentication mechanism for Django REST Framework based on [JSON Web Tokens][JWT] in the browser backed up by [Knox][knox]-powered tokens in the database. This package aims to take the better parts of both worlds, including: - Expirable tokens: The tokens may be manually expired in the database, so a user can log out of all other logged-in places, or everywhere. - Different tokens per login attempt (per user-agent), meaning that a user's session is tied to the specific machine and logging can be segregated per usage. - JWT-based tokens, so the token can have an embedded expiration time, and further metadata for other applications. - Tokens are generated via OpenSSL so that they are cryptographically more secure. - Only the tokens' hashes are stored in the database, so that even if the database gets dumped, an attacker cannot impersonate people through existing credentials - Other applications sharing the JWT private key can also decrypt the JWT Usage ===== Add this application and knox to INSTALLED APPS in your settings.py . Then, add this app's routes to some of your urlpatterns . You can use the verify endpoint to verify whether a token is valid or not (which may be useful in a microservice architecture). Tests ===== Tests are automated with tox and run on Travis-CI automatically. You can check the status in Travis, or just run tox from the command line. Contributing ============ This project uses the GitHub Flow appro","default_branch":null,"files":null,"tree":[],"storefront":"/r/ssaavedra","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ssaavedra/drf-jwt-knox/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}