types-jwcrypto

from jwcrypto import jwk, jwt import json # 1. Generate a symmetric key key = jwk.JWK.generate(kty='oct', size=256) # 2. Define claims (payload) claims = { 'iss': 'my-app', 'aud': 'your-service', 'sub': 'user123', 'exp': 1678886400 # Example expiration time (Unix timestamp) } # 3. Create a JWT object with header and claims token = jwt.JWT(header={'alg': 'HS256'}, claims=claims) # 4. Sign the token token.make_signed_token(key) # 5. Serialize the token to a compact string compact_token = token.serialize() print(f"Generated JWT: {compact_token}") # 6. Deserialize and validate the token # In a real application, you would receive 'compact_token' from a client # and validate it with a trusted key. decoded_token = jwt.JWT(jwt=compact_token, key=key) # No explicit validate() call needed if key is provided during instantiation # However, it's good practice to call it if you deserialize without a key first. # decoded_token.validate(key) # This can be used if `jwt` was created without `key` print(f"Decoded claims: {json.dumps(json.loads(decoded_token.claims), indent=2)}")