Access JWT claims in view method about djangorestframework-simplejwt

[sshishov]

Hello, to get the payload you do not need to decode and use key. Key is needed just to sign the payload (that it is not altered).
Just write the util method for yourself to get the payload from token (helper):

import json

import jwt


def create(self, request, *args, **kwargs):
    data = request.data
    token_payload = get_token_payload(token=request.META.get('HTTP_AUTHORIZATION'))
    user_id = token_payload['user_id']
    ... do more stuff ...

def get_token_payload(token):
    return json.loads(jwt.utils.base64url_decode(token.split('.')[1]).decode())

[davesque]

@chgad Assuming you're using the JWTAuthentication backend properly by placing it in the list of DEFAULT_AUTHENTICATION_CLASSES in the REST_FRAMEWORK config object, Django should provide a user object to you on the view's request object:

def create(self, request, *args, **kwargs):
    user_id = request.user.id
    ... do more stuff ...

If you're not able to resolve the difficulty, feel free to re-open the issue.

[sshishov]

Just try to be more specific, what you should get in the view. If you need user_id then you do not need to get it from the token. Just get it from request object as @davesque mentioned.

[chgad]

Hi,
please excuse me for taking so long to respond to the first/second answer.

@davesque suggestion is what i finally went with, which didn't work in the first run due to a miss-configuration of our settings.py .

This miss-configuration resulted in self.request.user always becoming an instance of AnnonymusUser.

In response to @sshishov :

We are looking forward to implement interactions with services which do only provide datatransfer encrypted within the JWT. This being said, we would like to have a generic solution to access all encrypted claims from the JWT.

If this behavior/feature is of interest/relevance I'd be happy, with a little bit of guidance, to dig into this and present a PR in the future.