BSD Ports

textproc/py-JWT 2.14.0 NetBSD

JSON Web Token implementation in Python

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
1984f0d6e3
License
mit
Categories
textproc, python
Package size
64.3 KiB, 390.9 KiB installed

Description

A Python implementation of JSON Web Token draft 32.

Install

Binary package:

pkgin install py311-JWT

From pkgsrc:

cd /usr/pkgsrc/textproc/py-JWT && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_642.14.0
NetBSD 10.1 aarch642.13.0
SmartOS / illumos x86_642.15.1
macOS 15 arm642.15.1

Dependencies

Run dependencies 2

Configuration

No options to configure.

Service scripts
none
Flavors
py312-JWT-2.14.0, py313-JWT-2.14.0, py314-JWT-2.14.0

Commit history 4

DateCommitCreditsLog message
1984f0d6e3 adam py-JWT: forget Python 3.10
6a8efb6203 adam py-JWT: updated to 2.15.1
2.15.1 Fixed - Accept trailing Base64URL ``=`` padding when decoding JWS segments, so tokens issued by AWS ALB and similar systems verify instead of raising ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as ``!!!!`` remains rejected
62db7c828e wiz py-JWT: update to 2.15.0.
v2.15.0 ------- Security ~~~~~~~~ - Wrap recursion errors from deeply nested JWT payloads in ``DecodeError`` instead of exposing a raw ``RecursionError``. Added ~~~~~ - Support Python 3.15 by @kytta in `#1202 <https://github.com/jpadilla/pyjwt/pull/1202>`__ Changed ~~~~~~~ - ``JWKSetCache`` now stores the parsed ``PyJWKSet`` rather than the raw JWKS payload, so a cache hit no longer re-parses every key. ``JWKSetCache.put()`` accepts either form and raises ``PyJWKSetError`` for anything else. As a result, ``PyJWKClient.get_jwk_set()`` returns the same ``PyJWKSet`` instance for as long as it stays cached, rather than a freshly built one per call in `#1208 <https://github.com/jpadilla/pyjwt/pull/1208>`__ - ``PyJWKClient.fetch_data()`` now raises …
08514fb436 wiz py-JWT: update to 2.14.0.
`v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>`__ ----------------------------------------------------------------------- Security ~~~~~~~~ - Harden HMAC key validation against public-key material supplied as JWK, JWKS, array, encoded, BOM-prefixed, DER, or PEM input. See `GHSA-r6x4-923q-g947 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947>`__, `GHSA-ffc3-869f-jxw9 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9>`__, `GHSA-p4g4-x82p-q773 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773>`__, and `GHSA-w2cx-738m-mc7w <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w>`__. - Reject automatic redirects when ``PyJWKClient`` fetches a JWKS, preventing …