0.0.7

docs/conf.py

@@ -23,10 +23,10 @@
 source_suffix = '.rst'
 master_doc = 'index'
 project = 'Authentic'
-year = '2018'
+year = '2021'
 author = 'Subhash Bhushan C'
 copyright = '{0}, {1}'.format(year, author)
-version = release = '0.0.6'
+version = release = '0.0.7'
 
 pygments_style = 'trac'
 templates_path = ['.']

requirements/test.txt

@@ -6,4 +6,4 @@ pytest-cov==2.5.1
 pytest-travis-fold==1.3.0
 pytest-env==0.6.2
 pluggy==0.6.0
-cryptography==2.4.1
+cryptography==3.2

setup.py

@@ -28,7 +28,7 @@ def read(*names, **kwargs):
 
 setup(
     name='authentic',
-    version='0.0.6a',
+    version='0.0.7a',
     license='BSD 3-Clause License',
     description='Comprehensive Authentication Package',
     long_description='%s\n%s' % (

src/authentic/backends/jwt/usecases.py

@@ -119,19 +119,31 @@ def process_request(self, request_object):
                 Status.UNAUTHORIZED, {'credentials': f'Invalid JWT Token. {e}'})
 
         # Find the identity in the decoded jwt
-        identity = jwt_data.get(active_config.JWT_IDENTITY_CLAIM, None)
+
         try:
+            if jwt_data.get('id'):
+                account = self.repo.filter(username=jwt_data.get('id')).first
+                jwt_data[active_config.JWT_IDENTITY_CLAIM] = {'account_id': account.id}
+            identity = jwt_data.get(active_config.JWT_IDENTITY_CLAIM, None)
             account = self.repo.get(identity.get('account_id'))
-        except ObjectNotFoundError:
+        except (ObjectNotFoundError, AttributeError):
             return ResponseFailure(
-                Status.UNAUTHORIZED,
+                Status.NOT_FOUND,
                 {'username_or_email': 'Account does not exist'})
 
         # Make sure that the session exits
         session = repo.SessionSchema.filter(
             session_key=f'token-{account.id}-{jwt_data["jti"]}',
-        )
-        if not session or session.first.expire_date < datetime.utcnow():
+        ).first
+        if not session and jwt_data.get('id'):
+            session = repo.SessionSchema.create(
+                    session_key=f'token-{account.id}'
+                                f'-{jwt_data["jti"]}',
+                    session_data={},
+                    expire_date=datetime.utcnow() +
+                                active_config.JWT_ACCESS_TOKEN_EXPIRES
+                )
+        if not session or session.expire_date < datetime.utcnow():
             return ResponseFailure(
                 Status.UNAUTHORIZED, {'token': 'Invalid Token'})