josepy
josepy copied to clipboard
JOSE protocol implementation in Python using cryptography
This PR should not be squashed to preserve the signed and tagged commit.
When updating from `1.13.0` to `1.14.0` for Arch Linux, the generated (and installed) wheel includes `CHANGELOG.rst` and `CONTRIBUTING.md` in the top level directory `/usr/lib/pythonX.XX/site-packages`. This is due to these lines...
Fix the `include` declarations in `pyproject.toml` to be restricted to the `sdist` format. Otherwise, all the listed files are installed straight into site-packages, i.e. you get: /usr/lib/python3.10/site-packages/CONTRIBUTING.md /usr/lib/python3.10/site-packages/CHANGELOG.rst ...
Python 3.12 is out now. See https://github.com/certbot/josepy/pull/146 where we did this for Python 3.11.
I'm using josepy 1.13.0 via `mozilla-django-oidc`, and I came across this problem: if provided with an "unsecured" JWS then it fails during parsing with the error shown below. That is,...
See https://github.com/certbot/certbot/issues/8322. I'm creating an issue here for more visibility. If people see this who know more about `python-jose`, I'd be interested to hear any concerns or support for this...
This is still pretty much WIP! - [ ] https://github.com/google/wycheproof Has vectors that may be interesting for edge cases. - [ ] Add tests for all key types. - [...
Many of those packages are useful during development, but can make running tests hard for OS packagers.
When updating `constraints.txt`, `importlib-metadata` and `mypy` currently need to be pinned back for tests to continue to pass. I think this should ideally be fixed. Also, `importlib-metadata` is only required...
In preparation for [this](https://community.letsencrypt.org/t/support-ed25519-and-ed448/69868), can we get support for those keys? Doesn't seem to be present in `1.1.0`: ```` $ python3 Python 3.6.7 (default, Oct 22 2018, 11:32:17) [GCC 8.2.0]...