Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: mweinelt/python-jose
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: mpdavis/python-jose
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 16 commits
  • 18 files changed
  • 14 contributors

Commits on May 28, 2025

  1. Remove get_random_bytes from cryptography backend (mpdavis#381) 

    * Remove get_random_bytes from cryptography backend

The RAND_bytes binding has been removed in cryptography 45.0. The
recommendation[1] is now to rely on `os.urandom`, which is already
implemented in the native backend.
The pycrpto implementation was removed earlier, so this removes the
leftover attempt to import it.

Closes: mpdavis#380

[1] https://cryptography.io/en/latest/random-numbers/

* remove unused import

* fix import order

---------

Co-authored-by: Asher Foa <[email protected]>
    @mweinelt @asherf
    mweinelt and asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    916dd9e View commit details
    Browse the repository at this point in the history

  2. Upgrade GHA components (mpdavis#383) 

    Signed-off-by: Asher Foa <[email protected]>
    @asherf
    asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    e680338 View commit details
    Browse the repository at this point in the history

  3. Remove EOL python version, add newer python versions (mpdavis#385) 

    Signed-off-by: Asher Foa <[email protected]>
    @asherf
    asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    4af0fd7 View commit details
    Browse the repository at this point in the history

  4. Fix GHA badge (mpdavis#386)

    @asherf
    asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    08b9094 View commit details
    Browse the repository at this point in the history

  5. Upgrade pytest + code coverage components (mpdavis#387) 

    Signed-off-by: Asher Foa <[email protected]>
    @asherf
    asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    962e1c7 View commit details
    Browse the repository at this point in the history

  6. Update index.rst (mpdavis#339) 

    ```python
>>> decoded_sig = base64url_decode(encoded_sig)
Traceback (most recent call last):
(...)
  File "(...)/python3.11/site-packages/jose/utils.py", line 76, in base64url_decode
    input += b"=" * (4 - rem)
TypeError: can only concatenate str (not "bytes") to str
>>> decoded_sig = base64url_decode(encoded_sig.encode())
>>>
```
    @leandropls
    leandropls authored May 28, 2025
    Configuration menu
    Copy the full SHA
    0b4af73 View commit details
    Browse the repository at this point in the history

  7. Do not use utc_now on module level (mpdavis#372) 

    * Do not use `utc_now` on module level

Looks like that this value is never used anywhere, and it should not be, because it is created once on a module import time.

I found this while working on python/typeshed#13514

* Fix tests as well

* fix lint import issue

* try to fix black lint errors

* fix again

---------

Co-authored-by: Asher Foa <[email protected]>
    @sobolevn @asherf
    sobolevn and asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    ceaac36 View commit details
    Browse the repository at this point in the history

  8. docs: Fix a few typos (mpdavis#299) 

    There are small typos in:
- TODO.md
- jose/jwe.py

Fixes:
- Should read `verification` rather than `verifcation`.
- Should read `encryption` rather than `encryptionn`.
- Should read `compact` rather than `cmpact`.
    @timgates42
    timgates42 authored May 28, 2025
    Configuration menu
    Copy the full SHA
    1f0ae0a View commit details
    Browse the repository at this point in the history

  9. Update jwk.py (mpdavis#328) 

    Fix for `Information Disclosure` vulnerability
    @mr-n30
    mr-n30 authored May 28, 2025
    Configuration menu
    Copy the full SHA
    45bd124 View commit details
    Browse the repository at this point in the history

  10. Updated pyasn version to match latest (mpdavis#338) 

    Co-authored-by: Asher Foa <[email protected]>
    @viraj-s15 @asherf
    viraj-s15 and asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    895777e View commit details
    Browse the repository at this point in the history

  11. Add python_requires arg to setup.cfg (mpdavis#273) 

    * Add python_requires arg to setup.py.

This prevents pip from attempting to install new python-jose packages on
unsupported Python versions.

See https://packaging.python.org/tutorials/packaging-projects/#configuring-metadata

* Bumb python_requires to 3.7.

* python 3.9

---------

Co-authored-by: Asher Foa <[email protected]>
    @avian2 @asherf
    avian2 and asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    2f0aca6 View commit details
    Browse the repository at this point in the history

  12. Added possibility to call jwk.construct() with a private key (mpdavis… 

    …#295)

Co-authored-by: DataGhost <[email protected]>
    @DataGhost
    DataGhost and DataGhost authored May 28, 2025
    Configuration menu
    Copy the full SHA
    6f03385 View commit details
    Browse the repository at this point in the history

  13. Add RTD config file to silence emailed deprecation warnings (mpdavis#333 

    )
    @blag
    blag authored May 28, 2025
    Configuration menu
    Copy the full SHA
    8fd0b63 View commit details
    Browse the repository at this point in the history

  14. utils.py: fix types in docstrings for base64url_encode/decode (mpdavi… 

    …s#269)
    @romanek-adam
    romanek-adam authored May 28, 2025
    Configuration menu
    Copy the full SHA
    50d4390 View commit details
    Browse the repository at this point in the history

  15. Improve jwt.decode key doc (mpdavis#198) 

    * Update jwt.py

* Update jwt.py
    @erny
    erny authored May 28, 2025
    Configuration menu
    Copy the full SHA
    393c374 View commit details
    Browse the repository at this point in the history

  16. Prepare release 3.5.0 (mpdavis#388)

    @asherf
    asherf authored May 28, 2025
    Configuration menu
    Copy the full SHA
    018b310 View commit details
    Browse the repository at this point in the history
Loading