Commits on May 14, 2020

1. Add JWTPayload(dict) for extended verification …

   The JWTPayload class allows PyJWT.decode() to expose header, signature,
   signing_input, and compute_hash_digest() (based on header) without
   changing the pyjwt API in a breaking way.
   Merely making this info accessible to the client without specifying an
   additional verification callback scheme is simpler for everyone.
   
   Include doc on why JWTPayload is a good idea in a module docstring,
   since it's a little unusual to subclass `dict`. The intent is to make
   the JWT payload change as little as possible while still making it easy
   to add more verification after the fact.
   
   Add a simple test for `JWTPayload.compute_hash_digest()` and a test
   for compute_hash_digest with cryptography (which is compared against a
   manual hashlib usage).
   
   Closes jpadilla#314, jpadilla#295

   

   sirosen committed May 14, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for e3222ad
   • Browse repository at this point

   Copy the full SHA

   e3222ad View commit details

   Browse the repository at this point in the history