okta-jwt-verifier-python
okta-jwt-verifier-python copied to clipboard
okta
okta-jwt-verifier-python
Hey - just a heads-up that it appears this library is using `python-jose` as a dependency, which hasn't been updated in ~2 years. Maintainers haven't shown any activity in GitHub...
As `python-jose` seems to be unmaintained and has multiple vulnerabilities raised against it, I've replaced this with `pyjwt`. The implementation is like-for-like, as `pyjwt` seems to implement most of the...
This seems like a duplicate of #16, but I'm creating a new issue as I would like to initiate a new discussion. I'm also using https://support.okta.com/help/s/article/Signature-Validation-Failed-on-Access-Token?language=en_US as a base for...
Hi, Another dependency issue - with retry2, which is missing source distribution. This is preventing conda-packaging for okta-jwt-verifier-python (and any package that uses it) Thank you and regards. Related issues....
### Changes Made This pull request addresses an issue in the codebase where the `client_id` was being verified against the `aud` claim, which was incorrect. The correct verification should be...
I'm currently working with a local okta server on my machine which obviously doesn't use https, however there's no way to disable the https_check from within my code. https://github.com/okta/okta-jwt-verifier-python/blob/a43bd2f04559663a0ba1fdfc6ac3a883974cc14e/okta_jwt_verifier/config_validator.py#L24 It...
This is not an issue but a suggestion for decoding a JWT (hopefully, it helps): The readme example shows how to use AccessTokenVerifier to validate an access token. However, if...
I am writing a flask-api where token-verification is done via okta-jwt-verifier. I have this code to verify tokens: ``` import asyncio from okta_jwt_verifier import AccessTokenVerifier, JWTVerifier loop = asyncio.new_event_loop() asyncio.set_event_loop(loop)...
