from itsdangerous import (TimedJSONWebSignatureSerializer as Serializer,
                          BadSignature, SignatureExpired)


SECRET_KEY = ''


def generate_auth_token():
    data = {'user_id': '1', 'username': 'xxx'}
    s = Serializer(SECRET_KEY, expires_in=60 * 60 * 24 * 7)
    token = s.dumps(data)
    return token.decode()


def verify_token(token):
    serial = Serializer(SECRET_KEY)
    try:
        # verify_data = serial.loads(token)
        data = serial.loads(token)
        print(data)
    except SignatureExpired:
        # valid token, but expired
        return False
    except BadSignature:
        # invalid token
        return False
    return True


if __name__ == '__main__':
    token = generate_auth_token()
    verify_token(token)