Django Rest Framework + JWT

Question

I'm using djangorestframework-jwt and I can authenticate just fine, but I'm having some trouble staying authenticated. I get a "Signature has expired." error after ~5m or so.

Am I just using it wrong? My assumption was that I'd pass it the token for every request and that'd keep me authenticated. Logging out would just mean forgetting the token.

What am I missing here?

Manu Artero · Accepted Answer · 2019-12-18 12:36:11Z

2

Documentation says that the default expiration delta is 5 minutes. See JWT_EXPIRATION_DELTA setting. The framework seems to assume that you want to implement token refresh.

edited Dec 18, 2019 at 12:36

Manu Artero

10.4k8 gold badges69 silver badges78 bronze badges

answered Jan 20, 2016 at 8:32

tuomur

7,15838 silver badges39 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

aroooo Over a year ago

Since you can't regularly refresh, is the expectation then that with mobile apps you'd just be required to set a really really long JWT_EXPIRATION_DELTA and an even longer JWT_REFRESH_EXPIRATION_DELTA? (Let's say you're using JWT to auth an iPhone app and they dont' open the app for 3-4 weeks)

tuomur Over a year ago

Yeah, just set the expiration time to 4 weeks or whatever is your expected time for a returning user.

Collectives™ on Stack Overflow

Django Rest Framework + JWT

1 Answer 1

2 Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Related