From 6c97d39e247301abcf5ea1fae4db241f2761aea5 Mon Sep 17 00:00:00 2001
From: tonyrewin <anton.rewin@gmail.com>
Date: Tue, 1 Nov 2022 00:05:10 +0300
Subject: [PATCH] date-encode

---
 auth/jwtcodec.py   | 14 ++++++++------
 base/exceptions.py |  5 +++++
 2 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/auth/jwtcodec.py b/auth/jwtcodec.py
index 92534ff9..32138547 100644
--- a/auth/jwtcodec.py
+++ b/auth/jwtcodec.py
@@ -1,7 +1,7 @@
 from datetime import datetime
-
+import time
 import jwt
-
+from base.exceptions import ExpiredToken
 from validations.auth import TokenPayload
 from settings import JWT_ALGORITHM, JWT_SECRET_KEY
 
@@ -14,7 +14,8 @@ class JWTCodec:
             # "user_email": user.email,  # less secure
             # "device": device,  # no use cases
             "exp": exp,
-            "iat": datetime.utcnow()
+            "iat": time.mktime(datetime.now().timetuple()),
+            "iss": "discours"
         }
         try:
             return jwt.encode(payload, JWT_SECRET_KEY, JWT_ALGORITHM)
@@ -29,12 +30,13 @@ class JWTCodec:
                 key=JWT_SECRET_KEY,
                 options={
                     "verify_exp": verify_exp,
-                    "verify_signature": False
+                    # "verify_signature": False
                 },
                 algorithms=[JWT_ALGORITHM],
+                issuer="discours"
             )
             r = TokenPayload(**payload)
             print('[jwtcodec] debug payload %r' % r)
             return r
-        except Exception as e:
-            print('[jwtcodec] JWT decode error %r' % e)
+        except jwt.ExpiredSignatureError:
+            raise ExpiredToken
diff --git a/base/exceptions.py b/base/exceptions.py
index e08f933e..0536dc4b 100644
--- a/base/exceptions.py
+++ b/base/exceptions.py
@@ -6,6 +6,11 @@ class BaseHttpException(GraphQLError):
     message = "500 Server error"
 
 
+class ExpiredToken(BaseHttpException):
+    code = 403
+    message = "403 Expired Token"
+
+
 class InvalidToken(BaseHttpException):
     code = 403
     message = "403 Invalid Token"