pyjwkest
pyjwkest copied to clipboard
Implementation of JWT, JWS, JWE and JWK
The code leaves behind some unclosed files. This is a resource waste and produces warnings under Python 3. Some examples in code: https://github.com/IdentityPython/pyjwkest/blob/master/src/jwkest/jwk.py#L93 https://github.com/IdentityPython/pyjwkest/blob/master/src/jwkest/jwk.py#L164 And in tests: https://github.com/IdentityPython/pyjwkest/blob/master/tests/test_2_jwk.py#L173 https://github.com/IdentityPython/pyjwkest/blob/master/tests/test_2_jwk.py#L297 https://github.com/IdentityPython/pyjwkest/blob/master/tests/test_3_jws.py#L632
Environment : * macOS 10.13.4 * pyjwkest : 1.4.0 Hello I tried to use the value `dir` for encryption algorithm but finally got the error : ``` NoSuitableDecryptionKey: dir ```...
I am doing a JWS signature and encryption JWE. The same code works fine on mac, but on windows, once it decrypts, we get ```b'eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvbmV0ZmxpeC5jb20iLCJwYXlsb2FkIjoie1widmlydHVhbENhcmRSZWZlcmVuY2VJZFwiOlwiVU5ZWCtMbXd\xe7\x18\x9e\xc9\x80\'\xfb\x99\x15\xd6\xe93\xaff\x9cSdn\xc3\x9e\xa8\xb3\x82\x8c\xc1/J2\xe2\xca
Since `load_x509_cert` and `KEYS.load_from_url` do not pass through kwargs to request, there is no way to configure the request session to allow client certificates or to override the `verify` setting.
This PR was automatically created by Snyk using the credentials of a real user. ### Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this...
Fixes https://github.com/IdentityPython/pyjwkest/issues/102 The `future` package has a [security vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2025-50817) with no patched version. Since it's not doing anything here, it would be good to remove it from the dependencies and...
 ### Snyk has created this PR to fix 2 vulnerabilities in the pip dependencies of this project. #### Snyk changed the following file(s): - `requirements.txt` ⚠️ Warning ``` equests...