Merge pull request #61 from GetStream/CHAT-1650

[CHAT-1650] Add revoke token methods and iat claim while generating tokens

Author: Siddhant Agarwal

stream_chat/async_chat/client.py

@@ -1,4 +1,5 @@
 import json
+import datetime
 from types import TracebackType
 from typing import Optional, Type
 from urllib.parse import urlparse
@@ -448,6 +449,40 @@ async def list_roles(self):
         """
         return await self.get("custom_role")
 
+    async def revoke_tokens(self, before):
+        """
+        Revokes tokens for an application
+        :param before: date before which the tokens are to be revoked, pass None to reset
+        """
+        if isinstance(before, datetime.datetime):
+            before = before.isoformat()
+
+        await self.update_app_settings({"revoke_tokens_issued_before": before})
+
+    async def revoke_user_token(self, user_id, before):
+        """
+        Revokes token for a user
+        :param user_id: user_id of user for which the token needs to be revoked
+        :param before: date before which the tokens are to be revoked, , pass None to reset
+        """
+        await self.revoke_users_token([user_id], before)
+
+    async def revoke_users_token(self, user_ids, before):
+        """
+        Revokes tokens for given users
+        :param user_ids: user_ids for user for whom the token needs to be revoked
+        :param before: date before which the tokens are to be revoked, pass None to reset
+        """
+        if isinstance(before, datetime.datetime):
+            before = before.isoformat()
+
+        updates = []
+        for user_id in user_ids:
+            updates.append(
+                {"id": user_id, "set": {"revoke_tokens_issued_before": before}}
+            )
+        await self.update_users_partial(updates)
+
     async def close(self):
         await self.session.close()
 

stream_chat/base/client.py

@@ -38,10 +38,12 @@ def normalize_sort(self, sort=None):
                         sort_fields.append({"field": k, "direction": v})
         return sort_fields
 
-    def create_token(self, user_id, exp=None, **claims):
+    def create_token(self, user_id, exp=None, iat=None, **claims):
         payload = {**claims, "user_id": user_id}
         if exp is not None:
             payload["exp"] = exp
+        if iat is not None:
+            payload["iat"] = iat
         return jwt.encode(payload, self.api_secret, algorithm="HS256")
 
     def verify_webhook(self, request_body, x_signature):
@@ -413,3 +415,24 @@ def list_roles(self):
         List custom roles of the app
         """
         pass
+
+    @abc.abstractmethod
+    def revoke_tokens(self, since):
+        """
+        Revoke tokens for an application issued since
+        """
+        pass
+
+    @abc.abstractmethod
+    def revoke_user_token(self, user_id, since):
+        """
+        Revoke tokens for a user issued since
+        """
+        pass
+
+    @abc.abstractmethod
+    def revoke_users_token(self, user_ids, since):
+        """
+        Revoke tokens for users issued since
+        """
+        pass

stream_chat/client.py

@@ -3,6 +3,7 @@
 from urllib.request import Request, urlopen
 
 import requests
+import datetime
 
 from stream_chat.__pkg__ import __version__
 from stream_chat.base.client import StreamChatInterface
@@ -435,3 +436,37 @@ def list_roles(self):
         List custom roles of the app
         """
         return self.get("custom_role")
+
+    def revoke_tokens(self, before):
+        """
+        Revokes tokens for an application
+        :param before: date before which the tokens are to be revoked, to reset pass None
+        """
+        if isinstance(before, datetime.datetime):
+            before = before.isoformat()
+
+        self.update_app_settings({"revoke_tokens_issued_before": before})
+
+    def revoke_user_token(self, user_id, before):
+        """
+        Revokes token for a user
+        :param user_id: user_id of user for which the token needs to be revoked
+        :param before: date before which the tokens are to be revoked, to reset pass None
+        """
+        self.revoke_users_token([user_id], before)
+
+    def revoke_users_token(self, user_ids, before):
+        """
+        Revokes tokens for given users
+        :param user_ids: user_ids for user for whom the token needs to be revoked
+        :param before: date before which the tokens are to be revoked, to reset pass None
+        """
+        if isinstance(before, datetime.datetime):
+            before = before.isoformat()
+
+        updates = []
+        for user_id in user_ids:
+            updates.append(
+                {"id": user_id, "set": {"revoke_tokens_issued_before": before}}
+            )
+        self.update_users_partial(updates)