Added JWT authentication.

examples/authentication.py

@@ -84,18 +84,18 @@ def token_gen_call(username, password):
     return 'Invalid username and/or password for user: {0}'.format(username)
 
 # JWT AUTH EXAMPLE #
-replace_this = False
+replace_this = False # Replace this placeholder in your implementation.
 config = {
     'jwt_secret': 'super-secret-key-please-change',
-    # token will expire in 3600 seconds if it is not refreshed and the user will be required to log in again
+    # Token will expire in 3600 seconds if it is not refreshed and the user will be required to log in again.
     'token_expiration_seconds': 3600,
-    # if a request is made at a time less than 1000 seconds before expiry, a new jwt is sent in the response header
+    # If a request is made at a time less than 1000 seconds before expiry, a new jwt is sent in the response header.
     'token_refresh_seconds': 1000 
 }
-# enable authenticated endpoints, example @authenticated.get('/users/me')
+# Enable authenticated endpoints, example @authenticated.get('/users/me').
 authenticated = hug.http(requires=hug.authentication.json_web_token(hug.authentication.verify_jwt, config['jwt_secret']))
 
-# check the token and issue a new one if it is about to expire (within token_refresh_seconds from expiry)
+# Check the token and issue a new one if it is about to expire (within token_refresh_seconds from expiry).
 @hug.response_middleware()
 def refresh_jwt(request, response, resource):
     authorization = request.get_header('Authorization')

hug/authentication.py

@@ -182,7 +182,7 @@ def jwt_authenticator_name():
 def json_web_token(request, response, verify_token, jwt_secret):
     """JWT verification
 
-    Checks for the Authorization header and verifies it using the verify_token function
+    Checks for the Authorization header and verifies it using the verify_token function.
     """
     authorization = request.get_header('Authorization')
     if authorization:
@@ -197,13 +197,9 @@ def verify_jwt(authorization, response, jwt_secret):
     try:
         token = authorization.split(' ')[1]
         decoding = jwt.decode(token, jwt_secret, algorithm='HS256')
-        print(decoding)
         return decoding['user_id']
-    except Exception as ex:
-        template = "An exception of type {0} occurred. Arguments:\n{1!r}"
-        print(template.format(type(ex).__name__, ex.args))
+    except:
         return False
-    return None
 
 def new_jwt(user_id, token_expiration_seconds, jwt_secret):
     return jwt.encode({'user_id': user_id,
@@ -220,10 +216,6 @@ def refresh_jwt(authorization, token_refresh_seconds, token_expiration_seconds,
             return jwt.encode({'user_id': decoding['user_id'],
                                'exp': datetime.utcnow() + timedelta(seconds=token_expiration_seconds)},
                                jwt_secret, algorithm='HS256').decode("utf-8")
-        else:
-            return None
-    except Exception as ex:
-        template = "An exception of type {0} occurred. Arguments:\n{1!r}"
-        print(template.format(type(ex).__name__, ex.args))
+    except:
         return None
 # END - JWT AUTH #