Skip to content

ORY jwt verification #226

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 12 commits into from
Dec 29, 2024
Merged

ORY jwt verification #226

merged 12 commits into from
Dec 29, 2024

Conversation

febus982
Copy link
Owner

@febus982 febus982 commented Dec 29, 2024 •
edited
Loading

  • Implements FastAPI dependency to decode JWT tokens using an external identity provider (through its JWKS endpoint)
  • Implements authentication server using ORY Kratos and opaque token => JWT token exchange using ORY Oathkeeper (both Cookie based and Bearer token based)

@febus982
Add pyjwt dependency
e8b8de7 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Create an AUTH configuration and put it in a context variable
948595a 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Create a dependency function to be used with Depends
0fdfd23 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Implementation of JWT authorizer dependency
f5709e9 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Review docker-compose.yaml
46583f0 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
No need to check the expiration in our setup
bdec8fc 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Setup basic ORY Kratos + Oathkeeper apps
28d1dd9 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Complete protection of /hello endpoint
39d5e2f 
Signed-off-by: Federico Busetti <[email protected]>
@febus982 febus982 changed the title Ory jwt verification ORY jwt verification Dec 29, 2024
@febus982
Lint, style and fix existing test
9e980d8 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Make decoder a function
0e0891c 
Signed-off-by: Federico Busetti <[email protected]>
@febus982
Add missing tests
0ae4e78 
Signed-off-by: Federico Busetti <[email protected]>
@febus982 febus982 force-pushed the ory-jwt-verification branch from 17a6be6 to 0ae4e78 Compare December 29, 2024 21:15
@febus982 febus982 marked this pull request as ready for review December 29, 2024 21:19
@febus982
Add documentation
3b8af16 
Signed-off-by: Federico Busetti <[email protected]>
@qlty-cloud-legacy Qlty Cloud (Legacy)
Copy link

Code Climate has analyzed commit 3b8af16 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (100% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.

@febus982 febus982 merged commit cb23a37 into main Dec 29, 2024
12 checks passed
@febus982 febus982 deleted the ory-jwt-verification branch December 29, 2024 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@febus982