SSL_KEY_PAIR_PUBLIC_KEY: New setting

Define a new setting named SSL_KEY_PAIR_PUBLIC_KEY to hold  the path
to the SSL key-pair's public key, used with the JWTs.

1 files changed, 4 insertions, 0 deletions

diff --git a/gn2/wqflask/__init__.py b/gn2/wqflask/__init__.py
index 1f69c085..40953522 100644
--- a/gn2/wqflask/__init__.py
+++ b/gn2/wqflask/__init__.py
@@ -10,6 +10,7 @@ from urllib.parse import urljoin, urlparse
 import redis
 import jinja2
 from flask_session import Session
+from authlib.jose import JsonWebKey
 from authlib.integrations.requests_client import OAuth2Session
 from flask import g, Flask, flash, session, url_for, redirect, current_app
 
@@ -107,6 +108,9 @@ except StartupError as serr:
 
 server_session = Session(app)
 
+with open(app.config["SSL_KEY_PAIR_PUBLIC_KEY"]) as _sslkey:
+    app.config["JWT_PUBLIC_KEY"] = JsonWebKey.import_key(_sslkey.read())
+
 @app.before_request
 def before_request():
     g.request_start_time = time.time()