Token Server

Token Server Library

Verifiers

This backend is used to verify a BrowserID assertion.

tokenserver.verifiers.get_verifier(registry=None)

returns the registered verifier, building it if necessary.

class tokenserver.verifiers.RemoteVerifier(audiences=None, trusted_issuers=None, allowed_issuers=None, verifier_url=None, timeout=None)
class tokenserver.verifiers.LocalVerifier(**kwargs)
check_token_signature(data, cert)

Check for a valid signature on the given JWT.

verify(assertion, audience=None, now=None)

Verify the given BrowserID assertion.

This method parses a BrowserID identity assertion, verifies the bundled chain of certificates and signatures, and returns the extracted email address and audience.

If the ‘audience’ argument is given, it first verifies that the audience of the assertion matches the one given. This can help avoid doing lots of crypto for assertions that can’t be valid. If you don’t specify an audience, you MUST validate the audience value returned by this method.

If the ‘now’ argument is given, it is used as the current time in milliseconds. This lets you verify expired assertions, e.g. for testing purposes.

verify_certificate_chain(certificates, now=None)

Verify a signed chain of certificates.

This function checks the signatures on the given chain of JWT certificates. It looks up the public key for the issuer of the first certificate, then uses each certificate in turn to check the signature on its successor.

If the entire chain is valid then to final certificate is returned.

Node assigners

This backend is used to allocate or get a node for a service to a given user.

class tokenserver.assignment.memorynode.MemoryNodeAssignmentBackend(service_entry=None, **kw)

Simple in-memory INodeAssignment backend.

This is useful for testing purposes and probably not much else.

class tokenserver.assignment.sqlnode.SQLNodeAssignment(sqluri, create_tables=False, pool_size=100, pool_recycle=60, pool_timeout=30, max_overflow=10, pool_reset_on_return='rollback', capacity_release_rate=0.1, **kw)