types-python-jose

import os from jose import jwt from jose.constants import ALGORITHMS # In a real application, load a secret from environment variables # or a secure configuration management system. SECRET_KEY = os.environ.get('JOSE_SECRET_KEY', 'your-secret-key-that-is-at-least-32-bytes-long') # Encoding a JWT payload = { "sub": "user123", "name": "John Doe", "admin": True } # Use a strong algorithm like HS256 for symmetric keys # For asymmetric keys (RS256, ES256), you'd use public/private key pairs. algorithm = ALGORITHMS.HS256 # Ensure your secret is bytes for HS algorithms if isinstance(SECRET_KEY, str): # Pad secret if too short for HS256 (requires 32 bytes for 256-bit key) SECRET_KEY_BYTES = SECRET_KEY.encode('utf-8').ljust(32, b'\0')[:32] else: SECRET_KEY_BYTES = SECRET_KEY encoded_jwt = jwt.encode(payload, SECRET_KEY_BYTES, algorithm=algorithm) print(f"Encoded JWT: {encoded_jwt}") # Decoding a JWT try: decoded_payload = jwt.decode(encoded_jwt, SECRET_KEY_BYTES, algorithms=[algorithm]) print(f"Decoded payload: {decoded_payload}") except jwt.JWTError as e: print(f"JWT decoding error: {e}") # Example with an incorrect key (for demonstration of type safety and error handling) try: wrong_key = b"wrong-secret".ljust(32, b'\0')[:32] # Pad for demonstration jwt.decode(encoded_jwt, wrong_key, algorithms=[algorithm]) except jwt.JWTError as e: print(f"Expected error with wrong key: {e}")