Moved jwt auth class to separate file to avoid hard dependency.

demo/demo/settings.py

@@ -123,7 +123,7 @@ REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': (
         'rest_framework.authentication.SessionAuthentication',
         'rest_framework.authentication.TokenAuthentication',
-        'dj_rest_auth.utils.JWTCookieAuthentication'
+        'dj_rest_auth.jwt_auth.JWTCookieAuthentication'
     ),
     'DEFAULT_SCHEMA_CLASS': 'rest_framework.schemas.coreapi.AutoSchema'
 }

dj_rest_auth/jwt_auth.py

@@ -0,0 +1,27 @@
+from django.conf import settings
+from rest_framework_simplejwt.authentication import JWTAuthentication
+
+
+class JWTCookieAuthentication(JWTAuthentication):
+    """
+    An authentication plugin that hopefully authenticates requests through a JSON web
+    token provided in a request cookie (and through the header as normal, with a
+    preference to the header).
+    """
+
+    def authenticate(self, request):
+        cookie_name = getattr(settings, 'JWT_AUTH_COOKIE', None)
+        header = self.get_header(request)
+        if header is None:
+            if cookie_name:
+                raw_token = request.COOKIES.get(cookie_name)
+            else:
+                return None
+        else:
+            raw_token = self.get_raw_token(header)
+
+        if raw_token is None:
+            return None
+
+        validated_token = self.get_validated_token(raw_token)
+        return self.get_user(validated_token), validated_token

dj_rest_auth/tests/settings.py

@@ -68,7 +68,7 @@ TEMPLATES = [
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': (
         'rest_framework.authentication.SessionAuthentication',
-        'dj_rest_auth.utils.JWTCookieAuthentication',
+        'dj_rest_auth.jwt_auth.JWTCookieAuthentication',
     )
 }
 

dj_rest_auth/tests/test_api.py

@@ -563,7 +563,7 @@ class APIBasicTests(TestsMixin, TestCase):
     @override_settings(JWT_AUTH_COOKIE='jwt-auth')
     @override_settings(REST_FRAMEWORK=dict(
         DEFAULT_AUTHENTICATION_CLASSES=[
-            'dj_rest_auth.utils.JWTCookieAuthentication'
+            'dj_rest_auth.jwt_auth.JWTCookieAuthentication'
         ]
     ))
     @override_settings(REST_SESSION_LOGIN=False)
@@ -624,7 +624,7 @@ class APIBasicTests(TestsMixin, TestCase):
     @override_settings(JWT_AUTH_COOKIE=None)
     @override_settings(REST_FRAMEWORK=dict(
         DEFAULT_AUTHENTICATION_CLASSES=[
-            'dj_rest_auth.utils.JWTCookieAuthentication'
+            'dj_rest_auth.jwt_auth.JWTCookieAuthentication'
         ]
     ))
     @override_settings(REST_SESSION_LOGIN=False)
@@ -649,7 +649,7 @@ class APIBasicTests(TestsMixin, TestCase):
     @override_settings(JWT_AUTH_COOKIE='jwt-auth')
     @override_settings(REST_FRAMEWORK=dict(
         DEFAULT_AUTHENTICATION_CLASSES=[
-            'dj_rest_auth.utils.JWTCookieAuthentication'
+            'dj_rest_auth.jwt_auth.JWTCookieAuthentication'
         ]
     ))
     @override_settings(REST_SESSION_LOGIN=False)

dj_rest_auth/utils.py

@@ -1,5 +1,7 @@
 from importlib import import_module
 
+from django.conf import settings
+
 
 def import_callable(path_or_callable):
     if hasattr(path_or_callable, '__call__'):
@@ -15,38 +17,14 @@ def default_create_token(token_model, user, serializer):
     return token
 
 
-try:
+def jwt_encode(user):
-    from django.conf import settings
-    from rest_framework_simplejwt.authentication import JWTAuthentication
     from rest_framework_simplejwt.serializers import TokenObtainPairSerializer
-
-    def jwt_encode(user):
     TOPS = import_callable(getattr(settings, 'JWT_TOKEN_CLAIMS_SERIALIZER', TokenObtainPairSerializer))
     refresh = TOPS.get_token(user)
     return refresh.access_token, refresh
 
-    class JWTCookieAuthentication(JWTAuthentication):
-        """
-        An authentication plugin that hopefully authenticates requests through a JSON web
-        token provided in a request cookie (and through the header as normal, with a
-        preference to the header).
-        """
-        def authenticate(self, request):
-            cookie_name = getattr(settings, 'JWT_AUTH_COOKIE', None)
-            header = self.get_header(request)
-            if header is None:
-                if cookie_name:
-                    raw_token = request.COOKIES.get(cookie_name)
-                else:
-                    return None
-            else:
-                raw_token = self.get_raw_token(header)
-
-            if raw_token is None:
-                return None
-
-            validated_token = self.get_validated_token(raw_token)
-            return self.get_user(validated_token), validated_token
 
+try:
+    from .jwt_auth import JWTCookieAuthentication
 except ImportError:
-    raise ImportError("rest-framework-simplejwt needs to be installed")
+    pass

docs/installation.rst

@@ -259,7 +259,7 @@ By default ``dj-rest-auth`` uses Django's Token-based authentication. If you wan
         ...
         'DEFAULT_AUTHENTICATION_CLASSES': (
             ...
-            'dj_rest_auth.utils.JWTCookieAuthentication',
+            'dj_rest_auth.jwt_auth.JWTCookieAuthentication',
         )
         ...
     }