JWT Authentication

auth.py

import datetime

import jwt
from django.conf import settings
from django.core.exceptions import ObjectDoesNotExist
from rest_framework import authentication, exceptions

from user.models import User


class JWTAuthentication(authentication.BaseAuthentication):
    def authenticate(self, request):

        # get the header here
        headers = request.META.get('HTTP_AUTHORIZATION')
        if not headers:
            return None

        # decode the jwt
        _jwt = str(headers).split(' ').pop()

        try:
            decoded_jwt = jwt.decode(_jwt, settings.SECRET_KEY, algorithms=["HS256"])

            # check if the jwt is valid: not expired
            expiry_date = decoded_jwt['exp']

            if datetime.datetime.fromtimestamp(int(expiry_date)) < datetime.datetime.now():
                raise exceptions.AuthenticationFailed('token expired')

            user = User.objects.get(username=decoded_jwt['phone'])

            return user, None

        except ObjectDoesNotExist:
            raise exceptions.AuthenticationFailed('No such user')