Skip to content

Re-issue JWT token when it is expired and Flask session is still valid #19

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 7, 2025
Merged

Re-issue JWT token when it is expired and Flask session is still valid #19

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3ee259a
Use auth module from qwc_services_core
benoitblanc Oct 7, 2025
d885a19
Re-issue JWT token when it is expired and Flask session is still valid
benoitblanc Oct 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 11 additions & 5 deletions src/server.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,7 @@
from flask_ldap3_login import LDAP3LoginManager, AuthenticationResponseStatus
from flask_ldap3_login.forms import LDAPLoginForm
import i18n
from qwc_services_core.jwt import jwt_manager
from qwc_services_core.auth import GroupNameMapper
from qwc_services_core.auth import auth_manager, GroupNameMapper, optional_auth
from qwc_services_core.runtime_config import RuntimeConfig
from qwc_services_core.tenant_handler import (
TenantHandler, TenantPrefixMiddleware, TenantSessionInterface)
Expand All @@ -32,7 +31,7 @@
app.config['JWT_ACCESS_TOKEN_EXPIRES'] = int(os.environ.get(
'JWT_ACCESS_TOKEN_EXPIRES', 12*3600))

jwt = jwt_manager(app)
jwt = auth_manager(app)
app.secret_key = app.config['JWT_SECRET_KEY']

i18n.set('load_path', [os.path.join(
Expand Down Expand Up @@ -214,7 +213,14 @@ def login():

target_url = url_path(request.args.get('url', '/'))
if current_user.is_authenticated:
return redirect(target_url)
if current_user.groups:
identity = {'username': current_user.username, 'groups': current_user.groups}
else:
identity = {'username': current_user.username}
access_token = create_access_token(identity)
resp = make_response(redirect(target_url))
set_access_cookies(resp, access_token)
return resp
form = LDAPLoginForm(meta=wft_locales())
form.logo = config.get("logo_image_url", {})
form.background = config.get("background_image_url", {})
Expand Down Expand Up @@ -282,7 +288,7 @@ def verify_login():


@app.route('/logout', methods=['GET', 'POST'])
@jwt_required(optional=True)
@optional_auth
def logout():
target_url = url_path(request.args.get('url', '/'))
resp = make_response(redirect(target_url))
Expand Down