All pull requests

Pull requests

• docs: document the encode sort_headers option

  #1242·Luxe7 opened Oct 26, 2026·

  ·

• Expose response headers from JWKS fetches

  #1241·smoltafet opened Oct 24, 2026·

  ·
  1

  5

• Check claims on verified decodes from a signature-disabled PyJWT

  #1240·Dilshad-Tanvi opened Oct 23, 2026·

  ·

• Add stale_if_error option to PyJWKClient

  #1239·Graph3x opened Oct 21, 2026·

  ·

• Raise the documented errors from PyJWKClient.fetch_data()

  #1238·PDGGK opened Oct 20, 2026·

  ·

• Reject non-object JSON in JWK deserialization

  #1237·FanWu-ai opened Oct 19, 2026·

  ·

• Allow explicit empty-string key IDs in PyJWKClient

  #1236·FanWu-ai opened Oct 19, 2026·

  ·

• docs: add changelog link to pyproject.toml

  #1235·max32001 opened Oct 18, 2026·

  ·

• Raise InvalidKeyError for EC keys on unsupported curves

  #1234·amlaban65 opened Oct 17, 2026·

  ·
  1

• Reject boolean exp, nbf and iat claims

  #1233·ivmat opened Oct 17, 2026·

  ·
  4

• feat(jwk): add RFC 7638 thumbprint calculation to PyJWK

  #1232·saadkhantareen opened Oct 15, 2026·

  ·
  1

  1

• fix: raise InvalidKeyError for unparseable EC and OKP keys

  #1230·HardMax71 opened Oct 13, 2026·

  ·
  1

  1

• Reject HMAC JWKs missing the required k member

  #1227·FanWu-ai opened Oct 10, 2026·

  ·

• fix: preserve microseconds when encoding datetime time claims

  #1226·cpruijsen opened Oct 10, 2026·

  ·
  1

• Preserve explicit b64 true when required by critical headers

  #1225·FanWu-ai opened Oct 9, 2026·

  ·

• Honor instance signature verification options during decoding

  #1224·FanWu-ai opened Oct 8, 2026·

  ·

• Scan JWS segments for non-Base64URL bytes without a per-byte loop

  #1223·Dilshad-Tanvi opened Oct 8, 2026·

  ·
  3

• Reject unhashable JWK algorithms before algorithm lookup

  #1222·FanWu-ai opened Oct 6, 2026·

  ·

• [pre-commit.ci] pre-commit autoupdate

  #1221·pre-commit-ci[bot] opened Oct 6, 2026Bot·

  ·

• test: cover decode success when required claims are present

  #1220·renanmpimentel opened Oct 5, 2026·

  ·

• Harden the CI a bit

  #1219·woodruffw opened Oct 2, 2026Contributor·

  ·
  1

• Require a sub claim when subject is passed to jwt.decode

  #1217·Dilshad-Tanvi opened Sep 30, 2026·

  ·
  1

• Deprecate rejecting tokens with a future iat claim

  #1215·codechrl opened Sep 27, 2026·

  ·
  1

• Reject untrusted extra audiences when aud_subset is set

  #1214·gyanu2507 opened Sep 22, 2026·

  ·
  1

• Support Ed25519 and Ed448 fully specified algorithms (RFC 9864)

  #1199·wbolster opened Aug 19, 2026Contributor·

  ·
  1

  5