django-oauth-toolkit发布JWT令牌

Question

{“access_token”：“txxxxxxxxxxxxxxxxxxfb45a”，“expires_in”：36000，“token_type”：“承载”，“scope”：“读写组”，“refresh_token”：“16okxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxfb45a”}

到

{“access_token”：“xxxxxxxx.xxxxx.xxxxxx”，“expires_in”：36000，“token_type”：“承载”，“scope”：“读写组”，“refresh_token”：“xxxxxxx.xxxxxx.xxxxx”}

我浏览了https://github.com/humanitec/django-oauth-toolkit-jwt/，但我认为我使用的django-oauth-toolkit版本不兼容。

Answer 1

class OauthServer(oauth2.Server):
    def __init__(self, request_validator, token_expires_in=None, token_generator=None, *args, **kwargs):
        token_generator = custom_token_generator
        super().__init__(request_validator, token_expires_in, token_generator, *args, **kwargs)

code>custom_token_generator函数将生成jwt令牌

def custom_token_generator(request, refresh_token=False):
    client_code = request.user and request.user.client.codigo

    now = datetime.now()
    payload = {
        'iat': int(now.timestamp()),
        'exp': int(expires.timestamp()),
    }
    if client_code:
        payload['org'] = client_code
    return jwt.encode(payload, settings.JWT['EC_PRIVATE_KEY'].encode(), algorithm='ES256').decode('ascii')

它不是理想的JWT，但您可以根据需要制作，唯一的问题是将AccessToken和RefreshTokenToken字段更改为TextField，因为JWT的长度将远远超过限制

from oauth2_provider.models import AbstractAccessToken, AbstractRefreshToken

class AccessToken(AbstractAccessToken):
    token = models.TextField()

class RefreshToken(AbstractRefreshToken):
    token = models.TextField()

django-oauth-toolkit文档将提供更多关于在django设置中覆盖这些字段的信息