Flask Flask-JWT-拡張を使用してJWTトークンを送信

Python、Flask JWT

Flask-JWT-Extended

タグ値の作成と検索

app = Flask(__name__)
app.config["JWT_SECRET_KEY"] = "super-secret"
jwt = JWTManager(app)

from flask_jwt_extended import create_access_token
access_token = create_access_token(identity=username)
## return jsonify(access_token=access_token)

from flask import Flask, jsonify

from flask_jwt_extended import JWTManager
from flask_jwt_extended import create_access_token

app = Flask(__name__)

app.config["JWT_SECRET_KEY"] = "munjibang"
jwt = JWTManager(app)

@app.route("/users/login", methods=['POST'])
def home():
    user_id = "id1"
    password = "password1"
    access_token = create_access_token(identity=user_id)
    print(access_token)
    return jsonify({"access_token":access_token})

if __name__ == '__main__':
    app.run('0.0.0.0', port=5000, debug=True)

可視結果値

ペイロードに識別子に加えて他の情報を追加する必要がある場合、

        	@app.route("/login", methods=["POST"])
            def login():
                username = request.json.get("username", None)
                password = request.json.get("password", None)
                if username != "test" or password != "test":
                    return jsonify({"msg": "Bad username or password"}), 401

                # You can use the additional_claims argument to either add
                # custom claims or override default claims in the JWT.
                additional_claims = {"aud": "some_audience", "foo": "bar"}
                access_token = create_access_token(username, additional_claims=additional_claims)
                return jsonify(access_token=access_token)

タグ値から情報を検索

有効なトークンが存在する場合のみアクセスが許可されます

@app.route("/users/protected")
@jwt_required()
def protected():
    current_user_id = get_jwt_identity()
    return jsonify(logged_in_as=current_user_id), 200

if __name__ == '__main__':
    app.run('0.0.0.0', port=5000, debug=True)

参考にする。POST MAN送信トークン値

自動ラベルページタイプをBearerTokenに設定し、トークン値を提供する

州の引用符がなく、Token値のみ

@jwt_required(optional=True)

@jwt_required(optional=True)
def place(place_id):
    current_identity = get_jwt_identity()
    if not current_identity:
        return jsonify({'result':'fail'})

    places = to_place_detail_dto(
        list(db.places.find({'_id': ObjectId(place_id)})))
    return jsonify({'places': places})

タグの有効期限が切れた場合の個別処理

https://stackoverflow.com/questions/68955402/flask-flask-jwt-extended-trying-to-custom-handle-unauthorized-error

このように行う.私はもともとabortでエラーを生成しましたが、そうするとerrorhandlerはそれを捕まえられません.

なるほどこの方法で処理

サーバ側でレンダリングするには、問題タグをセッションに追加する必要があります。

app = Flask(__name__)

# Configure application to store JWTs in cookies. Whenever you make
# a request to a protected endpoint, you will need to send in the
# access or refresh JWT via a cookie.
app.config['JWT_TOKEN_LOCATION'] = ['cookies']

# Set the cookie paths, so that you are only sending your access token
# cookie to the access endpoints, and only sending your refresh token
# to the refresh endpoint. Technically this is optional, but it is in
# your best interest to not send additional cookies in the request if
# they aren't needed.
app.config['JWT_ACCESS_COOKIE_PATH'] = '/api/'
app.config['JWT_REFRESH_COOKIE_PATH'] = '/token/refresh'

# Disable CSRF protection for this example. In almost every case,
# this is a bad idea. See examples/csrf_protection_with_cookies.py
# for how safely store JWTs in cookies
app.config['JWT_COOKIE_CSRF_PROTECT'] = False

この設定部分を追加する必要がある

logout

@app.route('/signout', methods=['POST'])
def signout():
    response = make_response(redirect(url_for("places_all")))
    unset_jwt_cookies(response)
    return response

追加