Authorization with HTTP header not working

Problem:

I have a JWT token provided and verifyToken mutation is working properly with provided token BUT when I set the Authorization header as “JWT <token>” it raises error with message “You do not have permission to perform this action.” (I have used login_required decorator in a mutation. I also use Postman for quering.) (I can make query from browser when I am logged in to admin panel.)

setting.py:

MIDDLEWARE = [
    ...
    "django.contrib.auth.middleware.AuthenticationMiddleware",
    ...
]

GRAPHENE = {
    "SCHEMA": "home.schema.schema",
    "MIDDLEWARE": [
        "graphql_jwt.middleware.JSONWebTokenMiddleware",
    ],
}

AUTHENTICATION_BACKENDS = [
    "graphql_jwt.backends.JSONWebTokenBackend",
    "django.contrib.auth.backends.ModelBackend",
]

GRAPHQL_JWT = {
    "JWT_PAYLOAD_HANDLER": 'account.utils.jwt_payload',
}

[sandnima]

Encountering the same problem have tried using both postman and Insomnia. It doesn’t matter if I use the decorator or this:

user = info.context.user

  if not user.is_authenticated:
      raise Exception("Authentication credentials were not provided")

It’s because of middleware do this:

1. Comment out middleware from Graphene setting in your setting.py:

GRAPHENE = {
    "SCHEMA": "home.schema.schema",
    # "MIDDLEWARE": (
    #      "graphql_jwt.middleware.JSONWebTokenMiddleware",
    # ),
}

1. Import and add middleware in your urls.py file:

from graphql_jwt.middleware import JSONWebTokenMiddleware


urlpatterns = [
    ...
    path("graphql",
         csrf_exempt(
            GraphQLView.as_view(graphiql=True, middleware=[JSONWebTokenMiddleware])
         )
    ),
    ...
]

[juanjcardona13]

Didn’t work for me. Can someone help please?