First draft implementation on JWT.

1 files changed, 24 insertions, 0 deletions

diff --git a/src/middleware.py b/src/middleware.py
new file mode 100644
index 0000000..2e38190
--- /dev/null
+++ b/src/middleware.py
@@ -0,0 +1,24 @@
+from falcon_auth import FalconAuthMiddleware, JWTAuthBackend
+
+
+TEMPORARY_SECRET_KEY_TO_BE_CHANGED = 'testing123'
+TEMPORARY_JWT_ALGORITHM_TO_BE_CHANGED = 'HS256'
+
+
+def user_check(credential):
+    return {'user': credential['sub'], 'role': credential['role'], 'domains': credential['domains']}
+
+
+jwt_auth = JWTAuthBackend(
+    user_loader=user_check,
+    secret_key=TEMPORARY_SECRET_KEY_TO_BE_CHANGED,
+    algorithm=TEMPORARY_JWT_ALGORITHM_TO_BE_CHANGED,
+    auth_header_prefix='Bearer',
+    leeway=600,
+    expiration_delta=900,
+    audience='localhost'
+)
+
+middleware_jwt = [
+    FalconAuthMiddleware(jwt_auth)
+]