JWT against Kerberos.

gistfile1.txt

    def auth_jwt(self, auth_header, callback):
        jwt_token = auth_header.split()[1]
        try:
            user_data = jwt.decode(jwt_token, self.settings['jwt_secret_key'], algorithms=['HS256'])
            username = user_data['username']
            password = user_data['password']
            kerberos.checkPassword(username, password, self.settings['sso_service'], self.settings['sso_realm'])
        except Exception as e:
            logging.error(f'JWT Error: {e}')
            raise tornado.web.HTTPError(401, 'Invalid authentication token.')
        user = f'{username}@{self.settings["sso_realm"]}'
        callback(user)