From c408cc749a94595771d0239dd3c3a687aff273f9 Mon Sep 17 00:00:00 2001 From: Lars Wirzenius Date: Tue, 5 Dec 2017 20:13:59 +0200 Subject: Add: cache token parsing --- apifw/token.py | 28 ++++++++++++++++++++++++---- 1 file changed, 24 insertions(+), 4 deletions(-) diff --git a/apifw/token.py b/apifw/token.py index d1e503c..a9a12ac 100644 --- a/apifw/token.py +++ b/apifw/token.py @@ -20,6 +20,29 @@ import jwt JWT_SIGNING_ALGORITHM = 'RS512' +class TokenCache: + + def __init__(self): + self._cache = {} + + def parse(self, token, key, audience): + if token not in self._cache: + if len(self._cache) > 1024: # pragma: no cover + self._cache = {} + decoded = self._decode(token, key, audience) + self._cache[token] = decoded + return self._cache[token] + + def _decode(self, token, key, audience): + return jwt.decode( + token, + key=key.exportKey('OpenSSH'), + audience=None, options={'verify_aud': False}) + + +_cache = TokenCache() + + def create_token(claims, signing_key): return jwt.encode( claims, @@ -28,7 +51,4 @@ def create_token(claims, signing_key): def decode_token(token, key, audience): - return jwt.decode( - token, - key=key.exportKey('OpenSSH'), - audience=None, options={'verify_aud': False}) + return _cache.parse(token, key, audience) -- cgit v1.2.1