New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

api_jwt: add a `strict_aud` option #902

Merged

jpadilla merged 2 commits into jpadilla:master from trail-of-forks:tob-strict-aud

Jul 18, 2023

Contributor

woodruffw commented Jul 17, 2023

Key bits:

There's a new strict_aud option, which defaults to False
If strict_aud is True, then the following audience checking behavior applies:
- audience MUST be a str;
- The aud claim MUST be a str;
- The audience and aud claim must match exactly.

Closes #894.


          api_jwt: add a strict_aud option

41788dd

Signed-off-by: William Woodruff <william@trailofbits.com>

This was referenced Jul 17, 2023

JWT API: Offer a "strict audience" mode? #894

Closed

Trusted publishing: ensure aud _only_ contains our audience. pypi/warehouse#13887

Closed

jpadilla approved these changes

View reviewed changes

Owner

jpadilla commented Jul 18, 2023

@woodruffw awesome, thanks! mind dropping a note on the changelog? 🙇

Contributor Author

woodruffw commented Jul 18, 2023

mind dropping a note on the changelog? 🙇

Sure thing! Doing now.


          CHANGELOG: record changes

59511cd

Signed-off-by: William Woodruff <william@trailofbits.com>

Contributor Author

woodruffw commented Jul 18, 2023

Done in 59511cd.

jpadilla merged commit 22ba132 into jpadilla:master

woodruffw deleted the tob-strict-aud branch

July 18, 2023 16:50

inmantaci pushed a commit to inmanta/inmanta-core that referenced this pull request


          Bump pyjwt from 2.7.0 to 2.8.0 (PR #6282)

0e3082d

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.7.0 to 2.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/releases">pyjwt's releases</a>.</em></p>
<blockquote>
<h2>2.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Export PyJWKClientConnectionError class by <a href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/887">jpadilla/pyjwt#887</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/889">jpadilla/pyjwt#889</a></li>
<li>Patch 1 by <a href="https://github.com/juur"><code>@juur</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/896">jpadilla/pyjwt#896</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/898">jpadilla/pyjwt#898</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/900">jpadilla/pyjwt#900</a></li>
<li>Update python version by <a href="https://github.com/auvipy"><code>@auvipy</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/895">jpadilla/pyjwt#895</a></li>
<li>api_jwt: add a <code>strict_aud</code> option by <a href="https://github.com/woodruffw"><code>@woodruffw</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/902">jpadilla/pyjwt#902</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/juur"><code>@juur</code></a> made their first contribution in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0">https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's changelog</a>.</em></p>
<blockquote>
<h2><code>v2.8.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0&gt;</code>__</h2>
<p>Changed</p>
<pre><code>
- Update python version test matrix by @auvipy in `[#895](jpadilla/pyjwt#895) &lt;https://github.com/jpadilla/pyjwt/pull/895&gt;`__
<p>Fixed</p>
<pre><code>
Added
</code></pre>
<ul>
<li>Add <code>strict_aud</code> as an option to <code>jwt.decode</code> by <a href="https://github.com/woodruffw"><code>@woodruffw</code></a> in <code>[#902](jpadilla/pyjwt#902) &amp;lt;https://github.com/jpadilla/pyjwt/pull/902&amp;gt;</code>__</li>
<li>Export PyJWKClientConnectionError class by <a href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <code>[#887](jpadilla/pyjwt#887) &amp;lt;https://github.com/jpadilla/pyjwt/pull/887&amp;gt;</code>__</li>
<li>Allows passing of ssl.SSLContext to PyJWKClient by <a href="https://github.com/juur"><code>@juur</code></a> in <code>[#891](jpadilla/pyjwt#891) &amp;lt;https://github.com/jpadilla/pyjwt/pull/891&amp;gt;</code>__
</code></pre></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jpadilla/pyjwt/commit/72ad55f6d7041ae698dc0790a690804118be50fc"><code>72ad55f</code></a> bump version</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/22ba13287874a7a22748b451c7d84f12b2f8ccab"><code>22ba132</code></a> api_jwt: add a <code>strict_aud</code> option (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/902">#902</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/6db5df72d031bd49f8a25e84ccf4ec91b2d6af3b"><code>6db5df7</code></a> Update python version (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/895">#895</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/6e7027684c37218786c1526c6790a57720602fa9"><code>6e70276</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/900">#900</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/ea351558128d726ead5502409a6a14dc05119578"><code>ea35155</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/898">#898</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/faeae6e54312f9827f369d185f60e99579338309"><code>faeae6e</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/896">#896</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/6cef6f28fa63f2bb01d22ff03868409da24373fd"><code>6cef6f2</code></a> Patch 1 (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/891">#891</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/7f07d50b41d21cb476bf81853257f9f9fedae3bc"><code>7f07d50</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/889">#889</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/1c272817a217c03534feb98004f3f6bd10512e07"><code>1c27281</code></a> Export PyJWKClientConnectionError class (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/887">#887</a>)</li>
<li>See full diff in <a href="https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=pip&previous-version=2.7.0&new-version=2.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

inmantaci pushed a commit to inmanta/inmanta-core that referenced this pull request


          Bump pyjwt from 2.7.0 to 2.8.0 (PR #6286)

0bf38b7

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.7.0 to 2.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/releases">pyjwt's releases</a>.</em></p>
<blockquote>
<h2>2.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Export PyJWKClientConnectionError class by <a href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/887">jpadilla/pyjwt#887</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/889">jpadilla/pyjwt#889</a></li>
<li>Patch 1 by <a href="https://github.com/juur"><code>@juur</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/896">jpadilla/pyjwt#896</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/898">jpadilla/pyjwt#898</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/900">jpadilla/pyjwt#900</a></li>
<li>Update python version by <a href="https://github.com/auvipy"><code>@auvipy</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/895">jpadilla/pyjwt#895</a></li>
<li>api_jwt: add a <code>strict_aud</code> option by <a href="https://github.com/woodruffw"><code>@woodruffw</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/902">jpadilla/pyjwt#902</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/juur"><code>@juur</code></a> made their first contribution in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0">https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's changelog</a>.</em></p>
<blockquote>
<h2><code>v2.8.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0&gt;</code>__</h2>
<p>Changed</p>
<pre><code>
- Update python version test matrix by @auvipy in `[#895](jpadilla/pyjwt#895) &lt;https://github.com/jpadilla/pyjwt/pull/895&gt;`__
<p>Fixed</p>
<pre><code>
Added
</code></pre>
<ul>
<li>Add <code>strict_aud</code> as an option to <code>jwt.decode</code> by <a href="https://github.com/woodruffw"><code>@woodruffw</code></a> in <code>[#902](jpadilla/pyjwt#902) &amp;lt;https://github.com/jpadilla/pyjwt/pull/902&amp;gt;</code>__</li>
<li>Export PyJWKClientConnectionError class by <a href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <code>[#887](jpadilla/pyjwt#887) &amp;lt;https://github.com/jpadilla/pyjwt/pull/887&amp;gt;</code>__</li>
<li>Allows passing of ssl.SSLContext to PyJWKClient by <a href="https://github.com/juur"><code>@juur</code></a> in <code>[#891](jpadilla/pyjwt#891) &amp;lt;https://github.com/jpadilla/pyjwt/pull/891&amp;gt;</code>__
</code></pre></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jpadilla/pyjwt/commit/72ad55f6d7041ae698dc0790a690804118be50fc"><code>72ad55f</code></a> bump version</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/22ba13287874a7a22748b451c7d84f12b2f8ccab"><code>22ba132</code></a> api_jwt: add a <code>strict_aud</code> option (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/902">#902</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/6db5df72d031bd49f8a25e84ccf4ec91b2d6af3b"><code>6db5df7</code></a> Update python version (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/895">#895</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/6e7027684c37218786c1526c6790a57720602fa9"><code>6e70276</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/900">#900</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/ea351558128d726ead5502409a6a14dc05119578"><code>ea35155</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/898">#898</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/faeae6e54312f9827f369d185f60e99579338309"><code>faeae6e</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/896">#896</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/6cef6f28fa63f2bb01d22ff03868409da24373fd"><code>6cef6f2</code></a> Patch 1 (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/891">#891</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/7f07d50b41d21cb476bf81853257f9f9fedae3bc"><code>7f07d50</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/889">#889</a>)</li>
<li><a href="https://github.com/jpadilla/pyjwt/commit/1c272817a217c03534feb98004f3f6bd10512e07"><code>1c27281</code></a> Export PyJWKClientConnectionError class (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/887">#887</a>)</li>
<li>See full diff in <a href="https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=pip&previous-version=2.7.0&new-version=2.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

emilymclean pushed a commit to TechlauncherFireApp/backend that referenced this pull request


          Bump pyjwt from 2.0.1 to 2.8.0 (#61)

305a3cd

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.0.1 to 2.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/releases">pyjwt's
releases</a>.</em></p>
<blockquote>
<h2>2.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Export PyJWKClientConnectionError class by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/887">jpadilla/pyjwt#887</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/889">jpadilla/pyjwt#889</a></li>
<li>Patch 1 by <a href="https://github.com/juur"><code>@juur</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/896">jpadilla/pyjwt#896</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/898">jpadilla/pyjwt#898</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/900">jpadilla/pyjwt#900</a></li>
<li>Update python version by <a
href="https://github.com/auvipy"><code>@auvipy</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/895">jpadilla/pyjwt#895</a></li>
<li>api_jwt: add a <code>strict_aud</code> option by <a
href="https://github.com/woodruffw"><code>@woodruffw</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/902">jpadilla/pyjwt#902</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/juur"><code>@juur</code></a> made their
first contribution in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0">https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0</a></p>
<h2>2.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add classifier for Python 3.11 by <a
href="https://github.com/eseifert"><code>@eseifert</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/818">jpadilla/pyjwt#818</a></li>
<li>Add <code>Algorithm.compute_hash_digest</code> and use it to
implement at_hash validation example by <a
href="https://github.com/sirosen"><code>@sirosen</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/775">jpadilla/pyjwt#775</a></li>
<li>fix: use datetime.datetime.timestamp function to have a milliseconds
by <a href="https://github.com/daillouf"><code>@daillouf</code></a> in
<a
href="https://redirect.github.com/jpadilla/pyjwt/pull/821">jpadilla/pyjwt#821</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/825">jpadilla/pyjwt#825</a></li>
<li>Custom header configuration in jwk client by <a
href="https://github.com/thundercat1"><code>@thundercat1</code></a> in
<a
href="https://redirect.github.com/jpadilla/pyjwt/pull/823">jpadilla/pyjwt#823</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/828">jpadilla/pyjwt#828</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/833">jpadilla/pyjwt#833</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/835">jpadilla/pyjwt#835</a></li>
<li>Add PyJWT._{de,en}code_payload hooks by <a
href="https://github.com/akx"><code>@akx</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/829">jpadilla/pyjwt#829</a></li>
<li>Add <code>sort_headers</code> parameter to
<code>api_jwt.encode</code> by <a
href="https://github.com/evroon"><code>@evroon</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/832">jpadilla/pyjwt#832</a></li>
<li>Make mypy configuration stricter and improve typing by <a
href="https://github.com/akx"><code>@akx</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/830">jpadilla/pyjwt#830</a></li>
<li>Bump actions/stale from 6 to 7 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/840">jpadilla/pyjwt#840</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/838">jpadilla/pyjwt#838</a></li>
<li>Add more types by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/843">jpadilla/pyjwt#843</a></li>
<li>Differentiate between two errors by <a
href="https://github.com/irdkwmnsb"><code>@irdkwmnsb</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/809">jpadilla/pyjwt#809</a></li>
<li>Fix <code>_validate_iat</code> validation by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/847">jpadilla/pyjwt#847</a></li>
<li>Improve error messages when cryptography isn't installed by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/846">jpadilla/pyjwt#846</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/852">jpadilla/pyjwt#852</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/855">jpadilla/pyjwt#855</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/859">jpadilla/pyjwt#859</a></li>
<li>Make <code>Algorithm</code> an abstract base class by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/845">jpadilla/pyjwt#845</a></li>
<li>docs: correct mistake in the changelog about verify param by <a
href="https://github.com/gbillig"><code>@gbillig</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/866">jpadilla/pyjwt#866</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/868">jpadilla/pyjwt#868</a></li>
<li>Bump actions/stale from 7 to 8 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/872">jpadilla/pyjwt#872</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/874">jpadilla/pyjwt#874</a></li>
<li>Add a timeout for PyJWKClient requests by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/875">jpadilla/pyjwt#875</a></li>
<li>Add client connection error exception by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/876">jpadilla/pyjwt#876</a></li>
<li>Add complete types to take all allowed keys into account by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/873">jpadilla/pyjwt#873</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/878">jpadilla/pyjwt#878</a></li>
<li>Build and upload PyPI package by <a
href="https://github.com/jpadilla"><code>@jpadilla</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/884">jpadilla/pyjwt#884</a></li>
<li>Fix for issue <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/862">#862</a> -
ignore invalid keys in a jwks. by <a
href="https://github.com/timw6n"><code>@timw6n</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/863">jpadilla/pyjwt#863</a></li>
<li>Add <code>as_dict</code> option to <code>Algorithm.to_jwk</code> by
<a href="https://github.com/fluxth"><code>@fluxth</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/881">jpadilla/pyjwt#881</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's
changelog</a>.</em></p>
<blockquote>
<h2><code>v2.8.0
&lt;https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0&gt;</code>__</h2>
<p>Changed</p>
<pre><code>
- Update python version test matrix by @auvipy in
`[#895](jpadilla/pyjwt#895)
&lt;https://github.com/jpadilla/pyjwt/pull/895&gt;`__
<p>Fixed</p>
<pre><code>
Added
</code></pre>
<ul>
<li>Add <code>strict_aud</code> as an option to <code>jwt.decode</code>
by <a href="https://github.com/woodruffw"><code>@woodruffw</code></a>
in <code>[#902](jpadilla/pyjwt#902)
&amp;lt;https://github.com/jpadilla/pyjwt/pull/902&amp;gt;</code>__</li>
<li>Export PyJWKClientConnectionError class by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in
<code>[#887](jpadilla/pyjwt#887)
&amp;lt;https://github.com/jpadilla/pyjwt/pull/887&amp;gt;</code>__</li>
<li>Allows passing of ssl.SSLContext to PyJWKClient by <a
href="https://github.com/juur"><code>@juur</code></a> in
<code>[#891](jpadilla/pyjwt#891)
&amp;lt;https://github.com/jpadilla/pyjwt/pull/891&amp;gt;</code>__</li>
</ul>
<h2><code>v2.7.0
&amp;lt;https://github.com/jpadilla/pyjwt/compare/2.6.0...2.7.0&amp;gt;</code>__</h2>
<p>Changed
</code></pre></p>
<ul>
<li>Changed the error message when the token audience doesn't match the
expected audience by <a
href="https://github.com/irdkwmnsb"><code>@irdkwmnsb</code></a>
<code>[#809](jpadilla/pyjwt#809)
&lt;https://github.com/jpadilla/pyjwt/pull/809&gt;</code>__</li>
<li>Improve error messages when cryptography isn't installed by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in
<code>[#846](jpadilla/pyjwt#846)
&lt;https://github.com/jpadilla/pyjwt/pull/846&gt;</code>__</li>
<li>Make <code>Algorithm</code> an abstract base class by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in
<code>[#845](jpadilla/pyjwt#845)
&lt;https://github.com/jpadilla/pyjwt/pull/845&gt;</code>__</li>
<li>ignore invalid keys in a jwks by <a
href="https://github.com/timw6n"><code>@timw6n</code></a> in
<code>[#863](jpadilla/pyjwt#863)
&lt;https://github.com/jpadilla/pyjwt/pull/863&gt;</code>__</li>
</ul>
<p>Fixed</p>
<pre><code>
- Add classifier for Python 3.11 by @eseifert in
`[#818](jpadilla/pyjwt#818)
&lt;https://github.com/jpadilla/pyjwt/pull/818&gt;`__
- Fix ``_validate_iat`` validation by @Viicos in
`[#847](jpadilla/pyjwt#847)
&lt;https://github.com/jpadilla/pyjwt/pull/847&gt;`__
- fix: use datetime.datetime.timestamp function to have a milliseconds
by @daillouf `[#821](jpadilla/pyjwt#821)
&lt;https://github.com/jpadilla/pyjwt/pull/821&gt;`__
- docs: correct mistake in the changelog about verify param by @gbillig
in `[#866](jpadilla/pyjwt#866)
&lt;https://github.com/jpadilla/pyjwt/pull/866&gt;`__
<p>Added
</code></pre></p>
<ul>
<li>Add <code>compute_hash_digest</code> as a method of
<code>Algorithm</code> objects, which uses
the underlying hash algorithm to compute a digest. If there is no
appropriate
hash algorithm, a <code>NotImplementedError</code> will be raised in
<code>[#775](jpadilla/pyjwt#775)
&lt;https://github.com/jpadilla/pyjwt/pull/775&gt;</code>__</li>
<li>Add optional <code>headers</code> argument to
<code>PyJWKClient</code>. If provided, the headers
will be included in requests that the client uses when fetching the JWK
set by <a
href="https://github.com/thundercat1"><code>@thundercat1</code></a> in
<code>[#823](jpadilla/pyjwt#823)
&lt;https://github.com/jpadilla/pyjwt/pull/823&gt;</code>__</li>
<li>Add PyJWT._{de,en}code_payload hooks by <a
href="https://github.com/akx"><code>@akx</code></a> in
<code>[#829](jpadilla/pyjwt#829)
&lt;https://github.com/jpadilla/pyjwt/pull/829&gt;</code>__</li>
<li>Add <code>sort_headers</code> parameter to
<code>api_jwt.encode</code> by <a
href="https://github.com/evroon"><code>@evroon</code></a> in
<code>[#832](jpadilla/pyjwt#832)
&lt;https://github.com/jpadilla/pyjwt/pull/832&gt;</code>__</li>
<li>Make mypy configuration stricter and improve typing by <a
href="https://github.com/akx"><code>@akx</code></a> in
<code>[#830](jpadilla/pyjwt#830)
&lt;https://github.com/jpadilla/pyjwt/pull/830&gt;</code>__</li>
<li>Add more types by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in
<code>[#843](jpadilla/pyjwt#843)
&lt;https://github.com/jpadilla/pyjwt/pull/843&gt;</code>__</li>
<li>Add a timeout for PyJWKClient requests by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in
<code>[#875](jpadilla/pyjwt#875)
&lt;https://github.com/jpadilla/pyjwt/pull/875&gt;</code>__</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/72ad55f6d7041ae698dc0790a690804118be50fc"><code>72ad55f</code></a>
bump version</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/22ba13287874a7a22748b451c7d84f12b2f8ccab"><code>22ba132</code></a>
api_jwt: add a <code>strict_aud</code> option (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/902">#902</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/6db5df72d031bd49f8a25e84ccf4ec91b2d6af3b"><code>6db5df7</code></a>
Update python version (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/895">#895</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/6e7027684c37218786c1526c6790a57720602fa9"><code>6e70276</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/900">#900</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/ea351558128d726ead5502409a6a14dc05119578"><code>ea35155</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/898">#898</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/faeae6e54312f9827f369d185f60e99579338309"><code>faeae6e</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/896">#896</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/6cef6f28fa63f2bb01d22ff03868409da24373fd"><code>6cef6f2</code></a>
Patch 1 (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/891">#891</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/7f07d50b41d21cb476bf81853257f9f9fedae3bc"><code>7f07d50</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/889">#889</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/1c272817a217c03534feb98004f3f6bd10512e07"><code>1c27281</code></a>
Export PyJWKClientConnectionError class (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/887">#887</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/d7c54dbebdab2ae17f7948fd4432b15e1bb82852"><code>d7c54db</code></a>
chore: update readme</li>
<li>Additional commits viewable in <a
href="https://github.com/jpadilla/pyjwt/compare/2.0.1...2.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=pip&previous-version=2.0.1&new-version=2.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

jrobbins-LiveData commented Oct 7, 2023

If this is also now a valid option on jwt.api_jwt.decode_complete(), then the doc needs to be updated for that function as well.

Contributor Author

woodruffw commented Oct 18, 2023

Thanks, looks like I missed that. I'll make a PR in a moment.

woodruffw mentioned this pull request

docs/api: document strict_aud on decode_complete #923

Merged

Contributor Author

woodruffw commented Oct 18, 2023

Opened #923 for the doc fix.

danielkjellid pushed a commit to danielkjellid/nest that referenced this pull request


          Bump pyjwt from 2.6.0 to 2.8.0 (#136)

2bcd011

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.6.0 to 2.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/releases">pyjwt's
releases</a>.</em></p>
<blockquote>
<h2>2.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Export PyJWKClientConnectionError class by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/887">jpadilla/pyjwt#887</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/889">jpadilla/pyjwt#889</a></li>
<li>Patch 1 by <a href="https://github.com/juur"><code>@juur</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/896">jpadilla/pyjwt#896</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/898">jpadilla/pyjwt#898</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/900">jpadilla/pyjwt#900</a></li>
<li>Update python version by <a
href="https://github.com/auvipy"><code>@auvipy</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/895">jpadilla/pyjwt#895</a></li>
<li>api_jwt: add a <code>strict_aud</code> option by <a
href="https://github.com/woodruffw"><code>@woodruffw</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/902">jpadilla/pyjwt#902</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/juur"><code>@juur</code></a> made their
first contribution in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/891">jpadilla/pyjwt#891</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0">https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0</a></p>
<h2>2.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add classifier for Python 3.11 by <a
href="https://github.com/eseifert"><code>@eseifert</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/818">jpadilla/pyjwt#818</a></li>
<li>Add <code>Algorithm.compute_hash_digest</code> and use it to
implement at_hash validation example by <a
href="https://github.com/sirosen"><code>@sirosen</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/775">jpadilla/pyjwt#775</a></li>
<li>fix: use datetime.datetime.timestamp function to have a milliseconds
by <a href="https://github.com/daillouf"><code>@daillouf</code></a> in
<a
href="https://redirect.github.com/jpadilla/pyjwt/pull/821">jpadilla/pyjwt#821</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/825">jpadilla/pyjwt#825</a></li>
<li>Custom header configuration in jwk client by <a
href="https://github.com/thundercat1"><code>@thundercat1</code></a> in
<a
href="https://redirect.github.com/jpadilla/pyjwt/pull/823">jpadilla/pyjwt#823</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/828">jpadilla/pyjwt#828</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/833">jpadilla/pyjwt#833</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/835">jpadilla/pyjwt#835</a></li>
<li>Add PyJWT._{de,en}code_payload hooks by <a
href="https://github.com/akx"><code>@akx</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/829">jpadilla/pyjwt#829</a></li>
<li>Add <code>sort_headers</code> parameter to
<code>api_jwt.encode</code> by <a
href="https://github.com/evroon"><code>@evroon</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/832">jpadilla/pyjwt#832</a></li>
<li>Make mypy configuration stricter and improve typing by <a
href="https://github.com/akx"><code>@akx</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/830">jpadilla/pyjwt#830</a></li>
<li>Bump actions/stale from 6 to 7 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/840">jpadilla/pyjwt#840</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/838">jpadilla/pyjwt#838</a></li>
<li>Add more types by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/843">jpadilla/pyjwt#843</a></li>
<li>Differentiate between two errors by <a
href="https://github.com/irdkwmnsb"><code>@irdkwmnsb</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/809">jpadilla/pyjwt#809</a></li>
<li>Fix <code>_validate_iat</code> validation by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/847">jpadilla/pyjwt#847</a></li>
<li>Improve error messages when cryptography isn't installed by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/846">jpadilla/pyjwt#846</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/852">jpadilla/pyjwt#852</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/855">jpadilla/pyjwt#855</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/859">jpadilla/pyjwt#859</a></li>
<li>Make <code>Algorithm</code> an abstract base class by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/845">jpadilla/pyjwt#845</a></li>
<li>docs: correct mistake in the changelog about verify param by <a
href="https://github.com/gbillig"><code>@gbillig</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/866">jpadilla/pyjwt#866</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/868">jpadilla/pyjwt#868</a></li>
<li>Bump actions/stale from 7 to 8 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/872">jpadilla/pyjwt#872</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/874">jpadilla/pyjwt#874</a></li>
<li>Add a timeout for PyJWKClient requests by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/875">jpadilla/pyjwt#875</a></li>
<li>Add client connection error exception by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/876">jpadilla/pyjwt#876</a></li>
<li>Add complete types to take all allowed keys into account by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/873">jpadilla/pyjwt#873</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/878">jpadilla/pyjwt#878</a></li>
<li>Build and upload PyPI package by <a
href="https://github.com/jpadilla"><code>@jpadilla</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/884">jpadilla/pyjwt#884</a></li>
<li>Fix for issue <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/862">#862</a> -
ignore invalid keys in a jwks. by <a
href="https://github.com/timw6n"><code>@timw6n</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/863">jpadilla/pyjwt#863</a></li>
<li>Add <code>as_dict</code> option to <code>Algorithm.to_jwk</code> by
<a href="https://github.com/fluxth"><code>@fluxth</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/881">jpadilla/pyjwt#881</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's
changelog</a>.</em></p>
<blockquote>
<h2><code>v2.8.0
&lt;https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0&gt;</code>__</h2>
<p>Changed</p>
<pre><code>
- Update python version test matrix by @auvipy in
`[#895](jpadilla/pyjwt#895)
&lt;https://github.com/jpadilla/pyjwt/pull/895&gt;`__
<p>Fixed</p>
<pre><code>
Added
</code></pre>
<ul>
<li>Add <code>strict_aud</code> as an option to <code>jwt.decode</code>
by <a href="https://github.com/woodruffw"><code>@woodruffw</code></a>
in <code>[#902](jpadilla/pyjwt#902)
&amp;lt;https://github.com/jpadilla/pyjwt/pull/902&amp;gt;</code>__</li>
<li>Export PyJWKClientConnectionError class by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in
<code>[#887](jpadilla/pyjwt#887)
&amp;lt;https://github.com/jpadilla/pyjwt/pull/887&amp;gt;</code>__</li>
<li>Allows passing of ssl.SSLContext to PyJWKClient by <a
href="https://github.com/juur"><code>@juur</code></a> in
<code>[#891](jpadilla/pyjwt#891)
&amp;lt;https://github.com/jpadilla/pyjwt/pull/891&amp;gt;</code>__</li>
</ul>
<h2><code>v2.7.0
&amp;lt;https://github.com/jpadilla/pyjwt/compare/2.6.0...2.7.0&amp;gt;</code>__</h2>
<p>Changed
</code></pre></p>
<ul>
<li>Changed the error message when the token audience doesn't match the
expected audience by <a
href="https://github.com/irdkwmnsb"><code>@irdkwmnsb</code></a>
<code>[#809](jpadilla/pyjwt#809)
&lt;https://github.com/jpadilla/pyjwt/pull/809&gt;</code>__</li>
<li>Improve error messages when cryptography isn't installed by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in
<code>[#846](jpadilla/pyjwt#846)
&lt;https://github.com/jpadilla/pyjwt/pull/846&gt;</code>__</li>
<li>Make <code>Algorithm</code> an abstract base class by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in
<code>[#845](jpadilla/pyjwt#845)
&lt;https://github.com/jpadilla/pyjwt/pull/845&gt;</code>__</li>
<li>ignore invalid keys in a jwks by <a
href="https://github.com/timw6n"><code>@timw6n</code></a> in
<code>[#863](jpadilla/pyjwt#863)
&lt;https://github.com/jpadilla/pyjwt/pull/863&gt;</code>__</li>
</ul>
<p>Fixed</p>
<pre><code>
- Add classifier for Python 3.11 by @eseifert in
`[#818](jpadilla/pyjwt#818)
&lt;https://github.com/jpadilla/pyjwt/pull/818&gt;`__
- Fix ``_validate_iat`` validation by @Viicos in
`[#847](jpadilla/pyjwt#847)
&lt;https://github.com/jpadilla/pyjwt/pull/847&gt;`__
- fix: use datetime.datetime.timestamp function to have a milliseconds
by @daillouf `[#821](jpadilla/pyjwt#821)
&lt;https://github.com/jpadilla/pyjwt/pull/821&gt;`__
- docs: correct mistake in the changelog about verify param by @gbillig
in `[#866](jpadilla/pyjwt#866)
&lt;https://github.com/jpadilla/pyjwt/pull/866&gt;`__
<p>Added
</code></pre></p>
<ul>
<li>Add <code>compute_hash_digest</code> as a method of
<code>Algorithm</code> objects, which uses
the underlying hash algorithm to compute a digest. If there is no
appropriate
hash algorithm, a <code>NotImplementedError</code> will be raised in
<code>[#775](jpadilla/pyjwt#775)
&lt;https://github.com/jpadilla/pyjwt/pull/775&gt;</code>__</li>
<li>Add optional <code>headers</code> argument to
<code>PyJWKClient</code>. If provided, the headers
will be included in requests that the client uses when fetching the JWK
set by <a
href="https://github.com/thundercat1"><code>@thundercat1</code></a> in
<code>[#823](jpadilla/pyjwt#823)
&lt;https://github.com/jpadilla/pyjwt/pull/823&gt;</code>__</li>
<li>Add PyJWT._{de,en}code_payload hooks by <a
href="https://github.com/akx"><code>@akx</code></a> in
<code>[#829](jpadilla/pyjwt#829)
&lt;https://github.com/jpadilla/pyjwt/pull/829&gt;</code>__</li>
<li>Add <code>sort_headers</code> parameter to
<code>api_jwt.encode</code> by <a
href="https://github.com/evroon"><code>@evroon</code></a> in
<code>[#832](jpadilla/pyjwt#832)
&lt;https://github.com/jpadilla/pyjwt/pull/832&gt;</code>__</li>
<li>Make mypy configuration stricter and improve typing by <a
href="https://github.com/akx"><code>@akx</code></a> in
<code>[#830](jpadilla/pyjwt#830)
&lt;https://github.com/jpadilla/pyjwt/pull/830&gt;</code>__</li>
<li>Add more types by <a
href="https://github.com/Viicos"><code>@Viicos</code></a> in
<code>[#843](jpadilla/pyjwt#843)
&lt;https://github.com/jpadilla/pyjwt/pull/843&gt;</code>__</li>
<li>Add a timeout for PyJWKClient requests by <a
href="https://github.com/daviddavis"><code>@daviddavis</code></a> in
<code>[#875](jpadilla/pyjwt#875)
&lt;https://github.com/jpadilla/pyjwt/pull/875&gt;</code>__</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/72ad55f6d7041ae698dc0790a690804118be50fc"><code>72ad55f</code></a>
bump version</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/22ba13287874a7a22748b451c7d84f12b2f8ccab"><code>22ba132</code></a>
api_jwt: add a <code>strict_aud</code> option (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/902">#902</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/6db5df72d031bd49f8a25e84ccf4ec91b2d6af3b"><code>6db5df7</code></a>
Update python version (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/895">#895</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/6e7027684c37218786c1526c6790a57720602fa9"><code>6e70276</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/900">#900</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/ea351558128d726ead5502409a6a14dc05119578"><code>ea35155</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/898">#898</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/faeae6e54312f9827f369d185f60e99579338309"><code>faeae6e</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/896">#896</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/6cef6f28fa63f2bb01d22ff03868409da24373fd"><code>6cef6f2</code></a>
Patch 1 (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/891">#891</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/7f07d50b41d21cb476bf81853257f9f9fedae3bc"><code>7f07d50</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/889">#889</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/1c272817a217c03534feb98004f3f6bd10512e07"><code>1c27281</code></a>
Export PyJWKClientConnectionError class (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/887">#887</a>)</li>
<li><a
href="https://github.com/jpadilla/pyjwt/commit/d7c54dbebdab2ae17f7948fd4432b15e1bb82852"><code>d7c54db</code></a>
chore: update readme</li>
<li>Additional commits viewable in <a
href="https://github.com/jpadilla/pyjwt/compare/2.6.0...2.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=pip&previous-version=2.6.0&new-version=2.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet