Function verify_token_from_string

api/auth.py:111–148

Verify a JWT token string directly (for WebSocket auth). Returns AuthenticatedUser or None if invalid.

(token: str)

AuthUser = Annotated[AuthenticatedUser, Depends(get_current_user)]

async def verify_token_from_string(token: str) -> Optional[AuthenticatedUser]:
    """
    Verify a JWT token string directly (for WebSocket auth).
    Returns AuthenticatedUser or None if invalid.
    """
    try:
        signing_key = jwks_client.get_signing_key_from_jwt(token)

        payload = jwt.decode(
            token,
            signing_key.key,
            algorithms=ALGORITHMS,
            audience=API_AUDIENCE,
            issuer=ISSUER,
            options={"verify_exp": True}
        )

        user_id = payload.get("sub")
        if user_id is None:
            return None

        app_metadata_claim = f"{CUSTOM_CLAIM_NAMESPACE}app_metadata"
        app_metadata = payload.get(app_metadata_claim) or {}

        email_claim = f"{CUSTOM_CLAIM_NAMESPACE}email"

        return AuthenticatedUser(
            id=user_id,
            email=payload.get(email_claim),
            is_pro=app_metadata.get("is_pro", False),
            is_max=app_metadata.get("is_max", False),
            is_plus=app_metadata.get("is_plus", False),
            app_metadata=app_metadata
        )

    except (PyJWTError, Exception) as e:
        logger.warning(f"WebSocket token validation failed: {e}")
        return None