JWT support

[HitDaCa]

How is the current implementation plan for JWT? I've seen that #252 but it seems this has not been followed up on. Are there currently plans to implement this or at leat allow custom token & refresh token configuration?

[NathanUrwin]

It would be nice if django-oauth-toolkit implemented django-rest-framework-jwt similar to django-rest-auth.

Edit: Or instead of django-rest-framework-jwt, maybe pyjwt would be better? Since django-oauth-toolkit is not dependent on the djangorestframework. Thanks!

[duaneking]

I'm currently looking at rfc7519 and that is the one we want, correct?

Is this the core issue for JWT support in terms of django-oauth-toolkit?

My choice would be pyjwt as that's already imported in oauthlib as an unused import.

[prafulbagai]

Any update on this feature? I see oauthlib has implemented JWT few weeks back.

[duaneking]

Please see the new oauthlib group for details on its jwt support.

[filias]

@duaneking can you leave an url for the group? Thanks.

[duaneking]

https://github.com/oauthlib/oauthlib

[rafa-munoz]

Hi everyone. I implemented an extension of this library to support JWT: https://github.com/Humanitec/django-oauth-toolkit-jwt

The reason for not making a PR here was the lack of time and knowledge of where to put the pieces in the correct place. Also, I did it in the fastest way that it helps my company to make the job done as soon as possible. Anyway, if there are many interested people I could do the effort in my free time of porting it here but I would need some guidance first.

[jleclanche]

@Menda Thanks for the heads up. Could you add a LICENSE file to your repo so we can maybe backport it into here more easily?

[rafa-munoz]

@jleclanche I added a LICENSE file with MIT license, so anyone is free to use how they would like to. Thanks!

[zyv]

Hello, we are very interested in this functionality as well! What is the upstream developers' position w.r.t. the fork? Are there any timelines? Is there anything we could do to help out? If yes, then I could try to budget it...

[zyv]

Also, what is the support status of Django 1.11 LTS? Any chance this will get backported to Django 1.11 compatible version? Thank you!

[jleclanche]

For it to be backported it'd first have to be mainlined.

@zyv If you want to help, you can spend time taking the fork mentioned by @Menda and helping mainline it into upstream django-oauth-toolkit. This would be very much appreciated. If you do that, I recommend you detail your plan here first before you go ahead.

[JonathanHuot]

oauthlib documentation has been updated to help developers using JWT for access_token.

It should help if anyone want to use it with django or do PRs accordingly.
Please see https://oauthlib.readthedocs.io/en/latest/oauth2/tokens/bearer.html and don't hesitate to comment if anything gets wrong!

[kaemmi84]

Hi everyone. I implemented an extension of this library to support JWT: https://github.com/Humanitec/django-oauth-toolkit-jwt

The reason for not making a PR here was the lack of time and knowledge of where to put the pieces in the correct place. Also, I did it in the fastest way that it helps my company to make the job done as soon as possible. Anyway, if there are many interested people I could do the effort in my free time of porting it here but I would need some guidance first.

The installation dosent work

[rafa-munoz]

Hi everyone. I implemented an extension of this library to support JWT: https://github.com/Humanitec/django-oauth-toolkit-jwt
The reason for not making a PR here was the lack of time and knowledge of where to put the pieces in the correct place. Also, I did it in the fastest way that it helps my company to make the job done as soon as possible. Anyway, if there are many interested people I could do the effort in my free time of porting it here but I would need some guidance first.

The installation dosent work

Someone would need to fork it and maintain, since Humanitec is not using it anymore.