diff --git a/src/stream_auth/middlewares/jwt.py b/src/stream_auth/middlewares/jwt.py index 4b90423..11eea86 100644 --- a/src/stream_auth/middlewares/jwt.py +++ b/src/stream_auth/middlewares/jwt.py @@ -25,10 +25,11 @@ def create_token(username: str, stream_key: str, exp: int = settings.JWT_EXP_TIM def verify(token: str): - try: - jwt.decode(token, JWT_PUB_KEY, algorithms=["RS256"]) - except (jwt.exceptions.ExpiredSignatureError, jwt.InvalidTokenError): - return False + jwt.decode(token, JWT_PUB_KEY, algorithms=["RS256"]) + # try: + # jwt.decode(token, JWT_PUB_KEY, algorithms=["RS256"]) + # except (jwt.exceptions.ExpiredSignatureError, jwt.InvalidTokenError): + # return False return True diff --git a/src/stream_auth/routes/stream.py b/src/stream_auth/routes/stream.py index 3a25b42..273dd94 100644 --- a/src/stream_auth/routes/stream.py +++ b/src/stream_auth/routes/stream.py @@ -32,11 +32,12 @@ def publish_check(): stream_key = request.form.get('stream_key') username = request.form.get('name') stream_user = user.search_stream_key(stream_key)[0] - if username != stream_user['username'] or jwt.verify(stream_key.encode('utf-8')): + if username != stream_user['username']: raise ValueError except (IndexError, ValueError): print('vish') return Response('Invalid Stream Key', 401) + jwt.verify(stream_key.encode('utf-8')) return Response('OK', 200)