Enhancing Security with JWT Tokens in Factory Management System

Objective: The objective of this assignment is to implement JWT token-based authentication and authorization in the factory management system to ensure secure access to resources and endpoints.

Problem Statement: You are tasked with enhancing the security of the factory management system by implementing JWT token-based authentication and authorization. This involves generating JWT tokens for user authentication and adding role-based access control to endpoints to restrict access based on user roles.

Task 1: Implement JWT Token Generation

Add the pyjwt library to the requirements.txt file to enable JWT token generation and validation.
Create a utils folder and generate the util.py file to create tokens and validate tokens as required.
Define a secret key to be used for creating the JWT tokens.
Implement a function named encode_token(user_id) in util.py to generate JWT tokens with an expiration time, issued time (iat), and user ID as the payload.

Task 2: Authentication Logic

create a login route for your Customer blueprint that takes in email and password.
Utilize the encode_token function from the util.py module you created to generate the JWT token with the user ID as the payload.
Return the JWT token along with a success message upon successful authentication.

Task 3: Create a token_required wrapper

Back in the util.py file, create a wrapper that will validate your tokens past in as Authorization headers.
Remember the value of your auth header 'Authorization: 'Bearer <token>'
Ensure to let the user know if the token has expired, or is invalid

Task 4: Add access control

Utilize your @token_required wrapper on resources, you think the user should be logged in to use. (apply it to at least one controller)

Lesson 3: Assignment | API Security