BSD Ports

security/py-authlib 1.8.0 NetBSD

Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
83278bf220
License
modified-bsd
Categories
security, python
Package size
362.9 KiB, 2871.9 KiB installed

Description

OAuth often seems complicated and difficult-to-implement. There are several prominent libraries for handling OAuth requests, but they all suffer from one or both of the following:

* They predate the OAuth 1.0 spec, AKA RFC 5849. * They predate the OAuth 2.0 spec, AKA RFC 6749. * They assume the usage of a specific HTTP request library.

OAuthLib is a generic utility which implements the logic of OAuth without assuming a specific HTTP request object or web framework. Use it to graft OAuth client support onto your favorite HTTP library, or provider support onto your favourite web framework. If you're a maintainer of such a library, write a thin veneer on top of OAuthLib and get OAuth support for very little effort.

In the other systems

SystemPortVersion
NetBSDsecurity/py-authlib1.8.0
FreeBSDsecurity/py-authlib1.8.0
DragonFlysecurity/py-authlib1.5.1

Install

Binary package:

pkgin install py311-authlib

From pkgsrc:

cd /usr/pkgsrc/security/py-authlib && make install clean

Dependencies

Run dependencies 3
Required by 1

Configuration

No options to configure.

Service scripts
none
Flavors
py312-authlib-1.8.0, py313-authlib-1.8.0, py314-authlib-1.8.0

Commit history 2

DateCommitCreditsLog message
83278bf220 adam py-authlib: updated to 1.9.1
1.9.1 Use scriv to handle the changelog 1.9.0 eat: add Identity Assertion JWT Authorization Grant (ID-JAG) Fix empty signatures validation in JWS JSON deserialization fix(jose): reject boolean values for NumericDate claims fix(client): avoid duplicated OAuth 1.0 parameters in signed requests OAuth2 token fetch crashes with JSONDecodeError instead of a catchable error on rate-limit responses docs: add i18n wrappers in conf.py and templates fix(oauth): enforce JOSE key, scope, and audience validation AsyncOpenIDMixin.parse_id_token: return None when id_token is absent, matching the sync client fix(oauth): enforce nonce and JAR request validation fix(oauth): require client authentication for ID-JAG grants
0910bef626 adam py-authlib: updated to 1.8.0
1.8.0 Prefer id_token_signed_response_alg client metadata to guess algs fix: Catch InvalidKeyIdError in RFC 9068 JWTBearerTokenValidator fix: make leeway configurable in JWTBearerTokenValidator feat: add default jti claim to sign_jwt_bearer_assertion fix(oauth): cast sub claim to string in JWTBearerTokenGenerator Declare lower bounds for dependencies feat(client): use httpx2 instead of httpx Fix RFC7523 malformed claims handling Fix httpx oauth1 binary form data fix(starlette_client): remove default= keyword from config.get calls Added client_id parameter to AssertionClient fix(oauth): save device credential with authenticated client id fix(oauth1): correct protocol name in InsecureTransportError description fix(client): client can be flexible with jwt's header …