manmolecular / websocket-chat

:mega: WebSocket chat based on the AIOHTTP library (JWT+JTI Revoke, Redis, PostgreSQL, AIOHTTP Web Server)

websocket-chat

Simple WebSocket chat based on the aiohttp library

Stack

• Auth: JWT + JTI (JWT id)
• Cache: Redis
• Database: PostgreSQL
• ORM: SQLAlchemy
• Backend: Aiohttp
• Frontend: Pure JS + Bootstrap
• Language: Python 3.8
• Deploy: Docker + docker-compose
• Additional: CSRF with aiohttp

Features

• Credentials validation (schemas, register/login handlers)
• Passwords (hashing, argon2)
• ORM data sanitization (CRUD operations, models)
• JWT + JTI with revocation (cache, redis)
• JavaScript JWT in-memory closure storage
• WebSockets: origin, auth, CSWSH
• CSRF (feedback handler)

Prepare

(Optional) Сreate .env file with the following variables if you want to overwrite default docker-compose.yml environment variables:

POSTGRES_DATABASE=...
POSTGRES_PASSWORD=...
POSTGRES_USER=...
POSTGRES_HOST=...
POSTGRES_PORT=...
REDIS_HOST=...
JWT_SECRET=...
ORIGIN=...

Run

docker-compose up -d

http://localhost:8080/

websocket-chat's Issues

Implement Argon2/bcrypt (w/ salt) password hashing

Check JWT expiration