Commit b5e1a28
adam
py-JWT: updated to 2.4.0
v2.4.0
Security
- [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. GHSA-ffqj-6fqr-9h24
Changed
- Explicit check the key for ECAlgorithm by @estin in jpadilla/pyjwt#713
- Raise DeprecationWarning for jwt.decode(verify=...) by @akx in jpadilla/pyjwt#742
Fixed
- Don't use implicit optionals by @rekyungmin in jpadilla/pyjwt#705
- documentation fix: show correct scope for decode_complete() by @sseering in jpadilla/pyjwt#661
- fix: Update copyright information by @kkirsche in jpadilla/pyjwt#729
- Don't mutate options dictionary in .decode_complete() by @akx in jpadilla/pyjwt#743
Added
- Add support for Python 3.10 by @hugovk in jpadilla/pyjwt#699
- api_jwk: Add PyJWKSet.__getitem__ by @woodruffw in jpadilla/pyjwt#725
- Update usage.rst by @guneybilen in jpadilla/pyjwt#727
- Docs: mention performance reasons for reusing RSAPrivateKey when encoding by @dmahr1 in jpadilla/pyjwt#734
- Fixed typo in usage.rst by @israelabraham in jpadilla/pyjwt#738
- Add detached payload support for JWS encoding and decoding by @fviard in jpadilla/pyjwt#723
- Replace various string interpolations with f-strings by @akx in jpadilla/pyjwt#744
- Update CHANGELOG.rst1 parent 0c95c97 commit b5e1a28
2 files changed
Lines changed: 7 additions & 8 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | | - | |
| 3 | + | |
4 | 4 | | |
5 | | - | |
6 | 5 | | |
7 | 6 | | |
8 | 7 | | |
| |||
19 | 18 | | |
20 | 19 | | |
21 | 20 | | |
22 | | - | |
| 21 | + | |
23 | 22 | | |
24 | 23 | | |
25 | 24 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | | - | |
4 | | - | |
5 | | - | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
0 commit comments