All pull requests

Pull requests

• Expose last successful response headers

  #1253·Graph3x opened Nov 11, 2026·

  ·
  1

• Add an explicit validation time to JWT decoding

  #1251·Aschenbath opened Nov 7, 2026·

  ·
  1

• Cache the HMAC key checks in HMACAlgorithm.prepare_key

  #1249·erwindouna opened Nov 5, 2026·

  ·

• Raise InvalidKeyError for unparseable EC and OKP keys

  #1248·qianeric-backup opened Nov 4, 2026·

  ·
  1

• Reject non-string sub claims during encode

  #1247·gyanu2507 opened Nov 3, 2026·

  ·
  1

• Update Python version in GitHub Actions workflow

  #1246·auvipy opened Nov 3, 2026Collaborator·

  ·

• Reject X509 CERTIFICATE PEM and sk-* SSH public keys as HMAC secrets

  #1245·Dilshad-Tanvi opened Nov 3, 2026·

  ·

• docs: document the encode sort_headers option

  #1242·Luxe7 opened Oct 26, 2026·

  ·

• Check claims on verified decodes from a signature-disabled PyJWT

  #1240·Dilshad-Tanvi opened Oct 23, 2026·

  ·
  1

• Add stale_if_error option to PyJWKClient

  #1239·Graph3x opened Oct 21, 2026·

  ·

• Raise the documented errors from PyJWKClient.fetch_data()

  #1238·PDGGK opened Oct 20, 2026·

  ·

• Reject non-object JSON in JWK deserialization

  #1237·FanWu-ai opened Oct 19, 2026·

  ·

• Allow explicit empty-string key IDs in PyJWKClient

  #1236·FanWu-ai opened Oct 19, 2026·

  ·

• docs: add changelog link to pyproject.toml

  #1235·max32001 opened Oct 18, 2026·

  ·

• Raise InvalidKeyError for EC keys on unsupported curves

  #1234·amlaban65 opened Oct 17, 2026·

  ·
  1

• Reject boolean exp, nbf and iat claims

  #1233·ivmat opened Oct 17, 2026·

  ·
  4

• feat(jwk): add RFC 7638 thumbprint calculation to PyJWK

  #1232·saadkhantareen opened Oct 15, 2026·

  ·
  1

  1

• fix: raise InvalidKeyError for unparseable EC and OKP keys

  #1230·HardMax71 opened Oct 13, 2026·

  ·
  1

  1

• Reject HMAC JWKs missing the required k member

  #1227·FanWu-ai opened Oct 10, 2026·

  ·
  1

• fix: preserve microseconds when encoding datetime time claims

  #1226·cpruijsen opened Oct 10, 2026·

  ·
  1

• Preserve explicit b64 true when required by critical headers

  #1225·FanWu-ai opened Oct 9, 2026·

  ·

• Honor instance signature verification options during decoding

  #1224·FanWu-ai opened Oct 8, 2026·

  ·

• Scan JWS segments for non-Base64URL bytes without a per-byte loop

  #1223·Dilshad-Tanvi opened Oct 8, 2026·

  ·
  3

• Reject unhashable JWK algorithms before algorithm lookup

  #1222·FanWu-ai opened Oct 6, 2026·

  ·

• [pre-commit.ci] pre-commit autoupdate

  #1221·pre-commit-ci[bot] opened Oct 6, 2026Bot·

  ·