This repository contains a library that implements user session, authentication, and authorization. It is based on the use of the JWT access token and refresh token.
The access token is passed to the http only cookie by default, which should protect it from theft during a cross-site scripting attack.
The refresh token is passed in the body of the response on the login and refresh
requests. It is stored in local storage. The refresh token need for update an access
token.
The best option is to download the repository and run an application into a virtual environment. Run the following commands:
git clone git@github.com:Alesh/jwt4auth.git
cd jwt4auth
python3.8 -m venv .venv
source .venv/bin/activate
pip install -U setuptools
pip install -U pip
pip install -U wheel
pip install nodeenv
nodeenv -p
npm install yarn -g
yarn install
yarn build
python setup.py develop
python -m sample.backend --static-path sample/build
There is a good example of a React based app frontend and aiohttp based backend. I hope the sample application helps you get started using this set of libraries. For more information, see the source code, which is enough documented