Comments (2)
davesque
commented on August 22, 2024
Fernet appears to have some of its own issues: fernet/spec#20
The most concerning one is that the signing key length on Fernet tokens is half of the recommended length set forth in the HMAC RFC 2104 (https://tools.ietf.org/html/rfc2104#section-3). According to the spec, this is "strongly discouraged". However, in the referenced issue, none other than Alex Gaynor seemed to suggest that this is not a big deal.
from djangorestframework-simplejwt.
tuupola
commented on August 22, 2024
Hijacking an old thread here. Maybe support Branca which is basically Fernet but with modern crypto?
https://branca.io/
https://github.com/tuupola/pybranca
from djangorestframework-simplejwt.
Related Issues (20)
- DeprecationWarning: datetime.datetime.utcnow() is deprecated HOT 2
- custom token for other entity HOT 1
- simplejwt token work for all tenants for django-tenants HOT 1
- [HELP REQUEST] I don't see any token on the django admin panel HOT 5
- 'psycopg2.errors.UndefinedTable: relation "token_blacklist_outstandingtoken" does not exist', across multiple Django apps / databases? HOT 1
- Please cut new release to fix pkg_resources deprecation HOT 5
- Is possible to avoid raising a exception from the .authenticate() method? HOT 1
- Issue with Database Queries in Authenticated Django API Calls despite JWT Verification HOT 3
- JWT for object level permission & Discussion tab HOT 8
- Type for BlacklistMixin.for_user() Needs to be enhanced for RefreshToken usage
- using rest_framework.authtoken instead of username and password when getting token HOT 1
- `self.jwks_client.get_signing_key_from_jwt` raises uncaught `PyJWKClientConnectionError` which gets masked as "Token is invalid or expired"
- Cookie based authentication HOT 1
- Caim "Issued At" not updated after token refresh
- Add Security Warning while using `for_user` method HOT 15
- Feature Request: Redis Support for Blacklisted JWTs HOT 1
- Token verification and validation
- Library does not automatically verify that the token hasn't been tampered with HOT 8
- Trouble fetching data using the token HOT 1
- Verify check tell refresh token is ok, anyway that is blacklisted
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from djangorestframework-simplejwt.