Django Ninja Token Authentication with Djoser

Source URL: https://stackoverflow.com/questions/70716976/django-ninja-token-authentication-with-djoser

Chinese content: This question shows research effort; it is useful and clear

2

Save this question.

Show activity on this post.

I have implemented CRUD using the Django Ninja framework, but now I want to authenticate in my application. I have installed and configured Djoser, so now I can generate tokens, but I don't know how to verify them in my CRUD

class AuthBearer(HttpBearer):
    def authenticate(self, request, token):
        if token == "supersecret":
            return token

@api.get("/bearer", auth=AuthBearer())
def bearer(request):
    return {"token": request.auth}

I should be able to check the token in the "AuthBearer" function, but I don't know how

my repo (link)

Share

Share a link to this question

Copy linkCC BY-SA 4.0

Improve this question

Follow

Follow this question to receive notifications

edited Dec 8, 2022 at 17:18

metersk

12.3k2222 gold badges6868 silver badges103103 bronze badges

Asked Jan 14, 2022 at 21:59

ArsalanArsalan

7722 silver badges99 bronze badges

Add a comment |

1 Answer 1

Sort by: Reset to default

Highest score (default) Trending (recent votes count more) Date modified (newest first) Date created (oldest first)

This answer is useful

6

Save the answer.

Show activity on this post.

So basically you have to extend Ninja's HttpBearer class and implement the authenticate method, which will accept the request and the token as arguments. This method will return None if the user is not authenticated, or a string that will be populated in request.auth if the user is authenticated. Typically, this string will be the username, so you can use it across all endpoints. Something like this (I am using PyJWT to decode the token):

import jwt
from ninja.security import HttpBearer

class AuthBearer(HttpBearer):
    def authenticate(self, request, token):
        try:
            #JWT secret key is set up in settings.py
            JWT_SIGNING_KEY = getattr(settings, "JWT_SIGNING_KEY", None)
            payload = jwt.decode(token, JWT_SIGNING_KEY, algorithms=["HS256"])
            username: str = payload.get("sub")
            if username is None:
                return None
        except jwt.PyJWTError as e:
            return None

        return username