Validating JWT tokens from the Google Identity-Aware Proxy as middleware.
pip install -e [email protected]:newsdev/nyt-pyiap.git
Update your settings.py file to add the Django middleware.
MIDDLEWARE_CLASSES = [
...
'pyiap.django.VerifyJWTMiddleware',
...
]
The request object in views.py will have two new attributes added:
request.jwt_user_id: The Google internal ID of the user who has been verified by IAP.request.jwt_user_email: The email address and email type of the user who has been verified by IAP.
Update your Flask app.py to wrap your instantiated Flask() application's wsgi_app with the VerifyJWTMiddleware.
app = Flask(__name__)
app.wsgi_app = VerifyJWTMiddleware(app.wsgi_app)
The request.environ object in app.py will have two new attributes added:
request.environ['jwt_user_id']: The Google internal ID of the user who has been verified by IAP.request.environ['jwt_user_email']: The email address and email type of the user who has been verified by IAP.
TBD.