joshua-hashimoto/django-channels-jwt-auth-middleware

django-channels-jwt-auth-middleware's Issues

How to handle "Signature has expired" exceptions

Is there a way to return the ExpiredSignatureErrors to the socket?

Currently the middleware is raising the following exception:

File ".../env/lib/python3.11/site-packages/django_channels_jwt_auth_middleware/auth.py", line 39, in get_payload
    payload = jwt_decode(
              ^^^^^^^^^^^
  File ".../env/lib/python3.11/site-packages/jwt/api_jwt.py", line 210, in decode
    decoded = self.decode_complete(
              ^^^^^^^^^^^^^^^^^^^^^
  File ".../env/lib/python3.11/site-packages/jwt/api_jwt.py", line 162, in decode_complete
    self._validate_claims(
  File ".../env/lib/python3.11/site-packages/jwt/api_jwt.py", line 248, in _validate_claims
    self._validate_exp(payload, now, leeway)
  File ".../env/lib/python3.11/site-packages/jwt/api_jwt.py", line 306, in _validate_exp
    raise ExpiredSignatureError("Signature has expired")
jwt.exceptions.ExpiredSignatureError: Signature has expired

IMO the exception should be captured and returned to the socket so that the client can refresh their token and try again.