make_jwt.py

# setup
#   pip install cryptography pyjwt
# ref.
#   http://gobiko.com/blog/token-based-authentication-http2-example-apns/

import jwt
import time

ALGORITHM = 'ES256'

KEY_ID = ''
AUTH_KEY = './AuthKey.p8'
TEAM_ID = ''

f = open(AUTH_KEY)
secret = f.read()

expires = 15770000  # 6 month

token = jwt.encode(
    {
        'iss': TEAM_ID,
        'iat': time.time(),
        'exp': time.time() + expires
    },
    secret,
    algorithm= ALGORITHM,
    headers={
        'alg': ALGORITHM,
        'kid': KEY_ID,
    }
)

print(token.decode('utf-8'))

#print("""
#curl -v -H 'Authorization: Bearer %s' "https://api.music.apple.com/v1/catalog/us/songs/203709340"
#""" % token.decode('utf-8'))