Changelog for python311-PyJWT-2.8.0-1.4.noarch.rpm :

* Mon Sep 04 2023 adrian.glaubitzAATTsuse.com- Update to version 2.8.0
* Update python version test matrix by AATTauvipy in #895
* Add ``strict_aud`` as an option to ``jwt.decode`` by AATTwoodruffw in #902
* Export PyJWKClientConnectionError class by AATTdaviddavis in #887
* Allows passing of ssl.SSLContext to PyJWKClient by AATTjuur in #891- Skip test_get_jwt_set_sslcontext_default test in testsuite
* Fri May 19 2023 adrianAATTsuse.de- update to version 2.7.0
* Add classifier for Python 3.11 by AATTeseifert in #818
* Add Algorithm.compute_hash_digest and use it to implement at_hash validation example by AATTsirosen in #775
* fix: use datetime.datetime.timestamp function to have a milliseconds by AATTdaillouf in #821
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #825
* Custom header configuration in jwk client by AATTthundercat1 in #823
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #828
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #833
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #835
* Add PyJWT._{de,en}code_payload hooks by AATTakx in #829
* Add sort_headers parameter to api_jwt.encode by AATTevroon in #832
* Make mypy configuration stricter and improve typing by AATTakx in #830
* Bump actions/stale from 6 to 7 by AATTdependabot in #840
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #838
* Add more types by AATTViicos in #843
* Differentiate between two errors by AATTirdkwmnsb in #809
* Fix _validate_iat validation by AATTViicos in #847
* Improve error messages when cryptography isn\'t installed by AATTViicos in #846
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #852
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #855
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #859
* Make Algorithm an abstract base class by AATTViicos in #845
* docs: correct mistake in the changelog about verify param by AATTgbillig in #866
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #868
* Bump actions/stale from 7 to 8 by AATTdependabot in #872
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #874
* Add a timeout for PyJWKClient requests by AATTdaviddavis in #875
* Add client connection error exception by AATTdaviddavis in #876
* Add complete types to take all allowed keys into account by AATTViicos in #873
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #878
* Build and upload PyPI package by AATTjpadilla in #884
* Fix for issue #862 - ignore invalid keys in a jwks. by AATTtimw6n in #863
* Add as_dict option to Algorithm.to_jwk by AATTfluxth in #881
* Fri Apr 21 2023 dmuellerAATTsuse.com- add sle15_python_module_pythons (jsc#PED-68)
* Thu Apr 13 2023 mceplAATTsuse.com- Make calling of %{sle15modernpython} optional.
* Fri Oct 28 2022 mceplAATTsuse.com- Clean up SPEC file.
* Thu Oct 27 2022 yarunachalamAATTsuse.com- Update to 2.6.0 Changed
* bump up cryptography >= 3.4.0 by AATTjpadilla in #807
* Remove types-cryptography from crypto extra by AATTlautat in #805 Fixed
* Invalidate token on the exact second the token expires #797
* fix: version 2.5.0 heading typo by AATTc0state in #803 Added
* Adding validation for issued_at when iat > (now + leeway) as ImmatureSignatureError by AATTsriharan16 in #794
* Sun Oct 09 2022 michaelAATTstroeder.com- Update to 2.5.0
* Bump actions/checkout from 2 to 3 by AATTdependabot in #758
* Bump codecov/codecov-action from 1 to 3 by AATTdependabot in #757
* Bump actions/setup-python from 2 to 3 by AATTdependabot in #756
* adding support for compressed payloads by AATTdanieltmiles in #753
* Revert \"adding support for compressed payloads\" by AATTauvipy in #761
* Add to_jwk static method to ECAlgorithm by AATTleonsmith in #732
* Remove redundant wheel dep from pyproject.toml by AATTmgorny in #765
* Adjust expected exceptions in option merging tests for PyPy3 by AATTmgorny in #763
* Do not fail when an unusable key occurs by AATTDaGuich in #762
* Fixes for pyright on strict mode by AATTbrandon-leapyear in #747
* Bump actions/setup-python from 3 to 4 by AATTdependabot in #769
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #770
* docs: fix simple typo, iinstance -> isinstance by AATTtimgates42 in #774
* Expose get_algorithm_by_name as new method by AATTsirosen in #773
* Remove support for python3.6 by AATTsirosen in #777
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #778
* Emit a deprecation warning for unsupported kwargs by AATTsirosen in #776
* Fix typo: priot -> prior by AATTjdufresne in #780
* Fix for headers disorder issue by AATTkadabusha in #721
* Update audience typing by AATTJulianMaurin in #782
* Improve PyJWKSet error accuracy by AATTJulianMaurin in #786
* Add type hints to jwt/help.py and add missing types dependency by AATTkkirsche in #784
* Add cacheing functionality for JWK set by AATTwuhaoyujerry in #781
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #788
* Mypy as pre-commit check + api_jws typing by AATTJulianMaurin in #787
* [pre-commit.ci] pre-commit autoupdate by AATTpre-commit-ci in #791
* Bump version to 2.5.0 by AATTjpadilla in #801
* Thu Jul 21 2022 adrian.glaubitzAATTsuse.com- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)- Drop CVE-2022-29217-non-blocked-pubkeys.patch in older dists since the issue was fixed upstream in version 2.4.0
* Tue Jun 07 2022 mrueckertAATTsuse.de- Update to 2.4.0 (CVE-2022-29217 boo#1199756) - Security - [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. GHSA-ffqj-6fqr-9h24 - Other changes: - Explicit check the key for ECAlgorithm by AATTestin in https://github.com/jpadilla/pyjwt/pull/713 - Raise DeprecationWarning for jwt.decode(verify=...) by AATTakx in https://github.com/jpadilla/pyjwt/pull/742 - Don\'t use implicit optionals by AATTrekyungmin in https://github.com/jpadilla/pyjwt/pull/705 - documentation fix: show correct scope for decode_complete() by AATTsseering in https://github.com/jpadilla/pyjwt/pull/661 - fix: Update copyright information by AATTkkirsche in https://github.com/jpadilla/pyjwt/pull/729 - Don\'t mutate options dictionary in .decode_complete() by AATTakx in https://github.com/jpadilla/pyjwt/pull/743 - Add support for Python 3.10 by AATThugovk in https://github.com/jpadilla/pyjwt/pull/699 - api_jwk: Add PyJWKSet.__getitem__ by AATTwoodruffw in https://github.com/jpadilla/pyjwt/pull/725 - Update usage.rst by AATTguneybilen in https://github.com/jpadilla/pyjwt/pull/727 - Docs: mention performance reasons for reusing RSAPrivateKey when encoding by AATTdmahr1 in https://github.com/jpadilla/pyjwt/pull/734 - Fixed typo in usage.rst by AATTisraelabraham in https://github.com/jpadilla/pyjwt/pull/738 - Add detached payload support for JWS encoding and decoding by AATTfviard in https://github.com/jpadilla/pyjwt/pull/723 - Replace various string interpolations with f-strings by AATTakx in https://github.com/jpadilla/pyjwt/pull/744
* Wed Nov 03 2021 adrian.glaubitzAATTsuse.com- Update to 2.3.0
* Revert \"Remove arbitrary kwargs.\" (#701)
* Add exception chaining (#702)- from version 2.2.0
* Remove arbitrary kwargs. (#657)
* Use timezone package as Python 3.5+ is required. (#694)
* Assume JWK without the \"use\" claim is valid for signing as per RFC7517 (#668)
* Prefer `headers[\"alg\"]` to `algorithm` in `jwt.encode()`. (#673)
* Fix aud validation to support {\'aud\': null} case. (#670)
* Make `typ` optional in JWT to be compliant with RFC7519. (#644)
* Remove upper bound on cryptography version. (#693)
* Add support for Ed448/EdDSA. (#675)
* Tue May 18 2021 dmuellerAATTsuse.com- update to 2.1.0: - Allow claims validation without making JWT signature validation mandatory. ` - Remove padding from JWK test data. ` - Make `kty` mandatory in JWK to be compliant with RFC7517. ` - Allow JWK without `alg` to be compliant with RFC7517. ` - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. ` - Add caching by default to PyJWKClient ` - Add missing exceptions.InvalidKeyError to jwt module __init__ imports ` - Add support for ES256K algorithm ` - Add `from_jwk()` to Ed25519Algorithm ` - Add `to_jwk()` to Ed25519Algorithm ` - Export `PyJWK` and `PyJWKSet`
* Fri Feb 26 2021 adrian.glaubitzAATTsuse.com- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)
* Mon Feb 01 2021 dmuellerAATTsuse.com- update to 2.0.1:
* Drop support for Python 2 and Python 3.0-3.5
* Require cryptography >= 3
* Drop support for PyCrypto and ECDSA
* Drop CLI
* Improve typings
* Dropped deprecated errors
* Dropped deprecated ``verify_expiration`` param in ``jwt.decode(...)``
* Dropped deprecated ``verify`` param in ``jwt.decode(...)``
* Require explicit ``algorithms`` in ``jwt.decode(...)`` by default
* Dropped deprecated ``require_
*`` options in ``jwt.decode(...)``
* Introduce better experience for JWKs
* further details see included CHANGELOG.rst- drop 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch (obsolete)
* Fri Oct 18 2019 stefan.bruensAATTrwth-aachen.de- Fix build with ecdsa >= 0.13.3, #447
* 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch
* Thu Mar 07 2019 tchvatalAATTsuse.com- Fix fdupes and test calls
* Mon Feb 04 2019 hpjAATTurpla.net- update to version 1.7.1:
* Update test dependencies with pinned ranges
* Fix pytest deprecation warnings- update to version v1.7.0:
* Remove CRLF line endings #353
* Update usage.rst #360
* Support for Python 3.7 #375 #379 #384- removed pyjwt-pytest390.patch (fixed upstream)- removed pyjwt-python37.patch (fixed upstream)- removed dos2unix conversion of jwt/__main__.py (fixed upstream)- add test build conditional
* Tue Dec 04 2018 mceplAATTsuse.com- Remove superfluous devel dependency for noarch package
* Tue Nov 27 2018 adrian.glaubitzAATTsuse.com- Add patch to fix testsuite with pytest 3.9.0:
* pyjwt-pytest390.patch
* Wed Nov 14 2018 tchvatalAATTsuse.com- Add patch to build with python 3.7:
* pyjwt-python37.patch
* Sat Jul 07 2018 arunAATTgmx.de- update to version 1.6.4:
* Reverse an unintentional breaking API change to .decode() #352
* Wed May 23 2018 tchvatalAATTsuse.com- Version update to 1.6.3:
* Dropped support for python 2.6 and 3.3 #301
* An invalid signature now raises an InvalidSignatureError instead of DecodeError #316
* Fix over-eager fallback to stdin #304
* Audience parameter throws InvalidAudienceError when application does not specify an audience, but the token does. #336
* All exceptions inherit from PyJWTError #340
* Add type hints #344
* Add help module 7ca41e5- Drop pointless _service file
* Fri Feb 23 2018 tbechtoldAATTsuse.com- Avoid not needed python-pytest-cov and python-pytest-runner BuildRequires. There is no need todo a coverage run during package build.
* Thu Nov 02 2017 arunAATTgmx.de- update to version 1.5.3:
* Changed + Increase required version of the cryptography package to >=1.4.0.
* Fixed + Remove uses of deprecated functions from the cryptography package. + Warn about missing algorithms param to decode() only when verify param is True #281
* Mon Aug 21 2017 tbechtoldAATTsuse.com- update to 1.5.2: - Ensure correct arguments order in decode super call [7c1e61d][7c1e61d] - Change optparse for argparse. [#238][238] - Guard against PKCS1 PEM encododed public keys [#277][277] - Add deprecation warning when decoding without specifying `algorithms` [#277][277] - Improve deprecation messages [#270][270] - PyJWT.decode: move verify param into options [#271][271] - Support for Python 3.6 [#262][262] - Expose jwt.InvalidAlgorithmError [#264][264] - Add support for ECDSA public keys in RFC 4253 (OpenSSH) format [#244][244] - Renamed commandline script `jwt` to `jwt-cli` to avoid issues with the script clobbering the `jwt` module in some circumstances. [#187][187] - Better error messages when using an algorithm that requires the cryptography package, but it isn\'t available [#230][230] - Tokens with future \'iat\' values are no longer rejected [#190][190] - Non-numeric \'iat\' values now raise InvalidIssuedAtError instead of DecodeError - Remove rejection of future \'iat\' claims [#252][252] - Add back \'ES512\' for backward compatibility (for now) [#225][225] - Fix incorrectly named ECDSA algorithm [#219][219] - Fix rpm build [#196][196] - Add JWK support for HMAC and RSA keys [#202][202]
* Fri Apr 28 2017 pousaduarteAATTgmail.com- Restore runtime dependency python-ecdsa
* Wed Apr 26 2017 pousaduarteAATTgmail.com- Convert to singlespec- Remove unneeded dependency python-ecdsa- Use \"download_files\" in _service file to automate source fetching
* Fri Mar 17 2017 rjschweiAATTsuse.com- Drop pycrypto as dependency, we only need cryptography
* Fri Mar 10 2017 alarrosaAATTsuse.com- Use update-alternatives so it can be co-installable with python3-PyJWT- Use dos2unix on jwt/__init__.py- updated source url to files.pythonhosted.org- Run the spec file through spec-cleaner- Drop PyJWT-1.1.0.diff which was only used on rhel (?)
* Thu Sep 15 2016 rjschweiAATTsuse.com- Include in SLES 12 (FATE#321371, bsc#998103)
* Thu Sep 01 2016 tbechtoldAATTsuse.com- Use https for Source url
* Thu Sep 01 2016 tbechtoldAATTsuse.com- update to 1.4.2: - A PEM-formatted key encoded as bytes could cause a `TypeError` to be raised [#213][213] - Newer versions of Pytest could not detect warnings properly [#182][182] - Non-string \'kid\' value now raises `InvalidTokenError` [#174][174] - `jwt.decode(None)` now gracefully fails with `InvalidTokenError` [#183][183]
* Tue Jan 05 2016 bwiedemannAATTsuse.com- BuildRequire python-pytest-cov >= 1.7
* Thu Nov 05 2015 toddrme2178AATTgmail.com- Update to 1.4.0 + Fixed
* Exclude Python cache files from PyPI releases. + Added
* Added new options to require certain claims (require_nbf, require_iat, require_exp) and raise `MissingRequiredClaimError` if they are not present.
* If `audience=` or `issuer=` is specified but the claim is not present, `MissingRequiredClaimError` is now raised instead of `InvalidAudienceError` and `InvalidIssuerError`- Update to 1.3.0 + Fixed
* ECDSA (ES256, ES384, ES512) signatures are now being properly serialized [#158][158]
* RSA-PSS (PS256, PS384, PS512) signatures now use the proper salt length for PSS padding. [#163][163] + Added
* Added a new `jwt.get_unverified_header()` to parse and return the header portion of a token prior to signature verification. + Removed
* Python 3.2 is no longer a supported platform. This version of Python is rarely used. Users affected by this should upgrade to 3.3+.- Update to 1.2.0 + Fixed
* Added back `verify_expiration=` argument to `jwt.decode()` that was erroneously removed in [v1.1.0][1.1.0]. + Changed
* Refactored JWS-specific logic out of PyJWT and into PyJWS superclass. [#141][141] + Deprecated
* `verify_expiration=` argument to `jwt.decode()` is now deprecated and will be removed in a future version. Use the `option=` argument instead.- Rebase PyJWT-1.1.0.diff
* Mon Aug 10 2015 seife+obsAATTb1-systems.com- apply PyJWT-1.1.0.diff only on RHEL/CentOS
* Thu Jul 09 2015 seife+obsAATTb1-systems.com- fix build on RHEL7, add PyJWT-1.1.0.diff
* Wed Apr 22 2015 mciharAATTsuse.cz- Include pycrypto and ecdsa in BuildRequires for complete test coverage- Use setup.py test to execute testsuite
* Wed Apr 22 2015 mciharAATTsuse.cz- Simplify dependencies (only python-cryptography is needed, pycrypto and ecdsa are just fallbacks whet is is not)
* Mon Apr 20 2015 mciharAATTsuse.cz- Enable testsuite during build
* Mon Apr 20 2015 mciharAATTsuse.cz- Update to 1.1.0
* Thu Nov 06 2014 mciharAATTsuse.cz- Update to 0.3.0
* Wed Jul 23 2014 mciharAATTsuse.cz- initial packaging