Enable JWT rotation (#50)

canonical · Apr 5, 2024 · 9e6719f · 9e6719f
1 parent c0a0fe8
commit 9e6719f
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/app/settings.py b/app/settings.py
@@ -10,6 +10,7 @@
 https://docs.djangoproject.com/en/4.2/ref/settings/
 """
 
+import datetime
 import json
 import os
 import urllib
@@ -147,6 +148,13 @@
     ],
 }
 
+SIMPLE_JWT = {
+    "ACCESS_TOKEN_LIFETIME": datetime.timedelta(days=1),
+    "REFRESH_TOKEN_LIFETIME": datetime.timedelta(days=7),
+    "ROTATE_REFRESH_TOKENS": True,
+    "SIGNING_KEY": SECRET_KEY,
+}
+
 LOGGING = {
     "version": 1,
     "disable_existing_loggers": False,

diff --git a/httprequest_lego_provider/tests/settings.py b/httprequest_lego_provider/tests/settings.py
@@ -4,6 +4,7 @@
 
 # pylint:disable=wildcard-import,unused-wildcard-import
 
+import datetime
 import os
 import secrets
 from pathlib import Path
@@ -32,3 +33,10 @@
         "NAME": os.path.join(BASE_DIR, "db.sqlite3"),
     }
 }
+
+SIMPLE_JWT = {
+    "ACCESS_TOKEN_LIFETIME": datetime.timedelta(days=1),
+    "REFRESH_TOKEN_LIFETIME": datetime.timedelta(days=7),
+    "ROTATE_REFRESH_TOKENS": True,
+    "SIGNING_KEY": SECRET_KEY,
+}