- Update to 1.6.5:

* use | instead of Optional for typing * remove InvalidCEKLengthError exception - Add patch support-cryptography-47.patch: * Normalize P-521 test fixture for cryptography 47+ OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-joserfc?expand=0&rev=15
2026-05-12 01:31:47 +00:00
commit 547537146d
8 changed files with 225 additions and 0 deletions
@@ -0,0 +1,96 @@
+-------------------------------------------------------------------
+Tue May 12 01:31:16 UTC 2026 - Steve Kowalik <steven.kowalik@suse.com>
+
+- Update to 1.6.5:
+  * use | instead of Optional for typing
+  * remove InvalidCEKLengthError exception
+- Add patch support-cryptography-47.patch:
+  * Normalize P-521 test fixture for cryptography 47+
+
+-------------------------------------------------------------------
+Wed Mar  4 14:44:25 UTC 2026 - Nico Krapp <nico.krapp@suse.com>
+
+- Update to 1.6.3 (fixes CVE-2026-27932, bsc#1259154)
+  * jwe: Set max value for p2c
+- Update to 1.6.2
+  * Class does not need to inherit object
+  * jwe: Move size limit to DeflateZipModel
+  * jwe: Auto add kid when add_recipient
+  * jwe: Auto add kid to recipient when kid exists
+- Update to 1.6.1
+  * Remove duplicate code
+  * Improve base key method definition
+  * Update for type hints
+  * jwt: Remove InvalidTokenError, ExpiredTokenError based on ClaimError
+- Update to 1.6.0
+  * Filter_algorithms names parameter default to all algs
+  * Pick_random_key algorithm parameter is optional
+  * Filter_algorithms supports KeySet objects
+  * jwk: Add a derive_key method for OKPKey
+  * jwk: Add derive_key method for ECKey
+  * Remove backend parameter, it is deprecated
+  * jwa: Improve RFC9864 check key logic
+  * jwk: Improve OKPKey implementation
+  * jwk: Allow import key from cryptography native key types
+  * jwk: Raise InvalidKeyCurveError when generate ECKey with invalid crv
+  * jwk: Improve generate_private_key on binding class
+  * jwk: Remove useless properties on OKPKey
+  * jws: Use JWSRegistry.guess_algorithm to replace JWSRegistry.guess_alg
+  * jwt: Make BaseClaimsRegistry.essential_keys a property.
+
+-------------------------------------------------------------------
+Wed Jun 11 11:13:43 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
+
+- Update to 1.1.0
+  * Use ECKey.binding.register_curve to register new supported curves
+  * Add __eq__ for Key and KeySet
+  * Use InvalidHeaderValueError in registry header validation
+  * Prevent from Base64 Malleability
+  * Export import_key and generate_key methods
+  * Use import as for prioritize the modules for editors
+  * Use UnsupportedAlgorithmError instead of ValueError in JWS/JWE registry
+  * Use MissingKeyTypeError, InvalidKeyIdError errors
+  * Allow jwt.encode passing encoder_cls and jwt.decode passing decoder_cls
+  * Use correct types for encoder_cls and decoder_cls parameters
+  * Respect RFC6749 character set in error descriptions
+  * Add KeyBase and GuestProtocol to __all__
+  * Update header validation raised errors
+  * Add "none" algorithm for JWS
+  * Cleanup joserfc.util
+  * Cleanup useless code in joserfc.util
+  * Update default value type hints for BaseKey.get method, #52
+  * Raise MissingKeyError when import empty key set. #35
+  * Remove useless catching binascii.Error
+
+-------------------------------------------------------------------
+Tue Oct 29 21:39:27 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.0.0:
+  * Fix type hints for strict mode.
+
+-------------------------------------------------------------------
+Mon Jun 17 06:32:20 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 0.12.0:
+  * Limit DEF decompress size to 250k bytes.
+  * Fix claims validation, , via :issue:`23`.
+  * Remove validating typ header with jwt.decode method.
+  * jwe.decrypt_json allows to verify only one recipient.
+  * Prevent OctKey to import ssh-dss.
+  * Deprecate use of string and bytes as key.
+
+-------------------------------------------------------------------
+Tue May 14 08:23:05 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 0.10.0:
+  * Change jwt.encode and jwt.decode to use JWS by default
+
+-------------------------------------------------------------------
+Wed Mar 27 15:15:37 UTC 2024 - ecsos <ecsos@opensuse.org>
+
+- Add %{?sle15_python_module_pythons}
+
+-------------------------------------------------------------------
+Fri Mar  1 14:44:30 UTC 2024 - Markéta Machová <mmachova@suse.com>
+
+- Initial packaging (v0.9.0), needed by python-moto
@@ -0,0 +1,66 @@
+#
+# spec file for package python-joserfc
+#
+# Copyright (c) 2026 SUSE LLC and contributors
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+%{?sle15_python_module_pythons}
+Name:           python-joserfc
+Version:        1.6.5
+Release:        0
+Summary:        The ultimate Python library for JOSE RFCs
+License:        BSD-3-Clause
+URL:            https://github.com/authlib/joserfc
+Source:         https://files.pythonhosted.org/packages/source/j/joserfc/joserfc-%{version}.tar.gz
+# PATCH-FIX-UPSTREAM gh#authlib/joserfc#96
+Patch0:         support-cryptography-47.patch
+BuildRequires:  %{python_module pip}
+BuildRequires:  %{python_module setuptools}
+BuildRequires:  %{python_module wheel}
+BuildRequires:  python-rpm-macros
+# SECTION test requirements
+BuildRequires:  %{python_module cryptography}
+BuildRequires:  %{python_module pycryptodome}
+BuildRequires:  %{python_module pytest}
+# /SECTION
+BuildRequires:  fdupes
+Requires:       python-cryptography
+Suggests:       python-pycryptodome
+BuildArch:      noarch
+%python_subpackages
+
+%description
+The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT
+
+%prep
+%autosetup -p1 -n joserfc-%{version}
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%python_expand %fdupes %{buildroot}%{$python_sitelib}
+
+%check
+%pytest
+
+%files %{python_files}
+%doc README.rst
+%license LICENSE
+%{python_sitelib}/joserfc
+%{python_sitelib}/joserfc-%{version}.dist-info
+
+%changelog
@@ -0,0 +1,24 @@
+*.changes merge=merge-changes
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tar filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text
@@ -0,0 +1,4 @@
+*.obscpio
+*.osc
+_build.*
+.pbuild
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a8f3442b04c233f742f7acde0d0dcd926414e9542a6337096b2b4e5f435f36c1
+size 182360
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c00c2830db969b836cba197e830e738dd9dda0955f1794e55d3c636f17f5c9a6
+size 229090
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1482a7db78fb4602e44ed89e51b599d052e091288c7c532c5b694e20149dec48
+size 231881
@@ -0,0 +1,26 @@
+From b89eadff61ef9d8cf4302d18987f27dc1b281647 Mon Sep 17 00:00:00 2001
+From: sebastian <sebastian_orko@hotmail.com>
+Date: Thu, 7 May 2026 23:16:23 -0600
+Subject: [PATCH] test: normalize P-521 private key fixture
+
+---
+ tests/keys/ec-p512-private.pem | 10 +++++-----
+ 1 file changed, 5 insertions(+), 5 deletions(-)
+
+diff --git a/tests/keys/ec-p512-private.pem b/tests/keys/ec-p512-private.pem
+index 5ebaff2e..9ec1818b 100644
+--- a/tests/keys/ec-p512-private.pem
+++ b/tests/keys/ec-p512-private.pem
+@@ -1,7 +1,7 @@
+ -----BEGIN EC PRIVATE KEY-----
+-MIHbAgEBBEFvFujwdb3ZFYnWnUZrFobrksVQfpDGFJ9Zt1ofpUrDBjBd4Z6rNB+x
+-K5OrfJPm2WidZxzsU69J9cCx/ntANMMUWaAHBgUrgQQAI6GBiQOBhgAEANoDiaaU
+-xmbFy1RrRNOSCsOp5lHj3ugLUnoK/MZHTLGL8UNVsw03K4aqqwVvA43CvQiQZE4t
+-gZAEYR/n+mCoXsutAYmlEpwe1e4VZTklnO+WULy8anV5yIjrmdwIDVvJ1IyJuBDK
+-ZO7SyxCnL6S/OW+WjPU9T6ZXcgNRBVaY40zwQ3zh
+MIHcAgEBBEIAbxbo8HW92RWJ1p1GaxaG65LFUH6QxhSfWbdaH6VKwwYwXeGeqzQf
+sSuTq3yT5tlonWcc7FOvSfXAsf57QDTDFFmgBwYFK4EEACOhgYkDgYYABADaA4mm
+lMZmxctUa0TTkgrDqeZR497oC1J6CvzGR0yxi/FDVbMNNyuGqqsFbwONwr0IkGRO
+LYGQBGEf5/pgqF7LrQGJpRKcHtXuFWU5JZzvllC8vGp1eciI65ncCA1bydSMibgQ
+ymTu0ssQpy+kvzlvloz1PU+mV3IDUQVWmONM8EN84Q==
+ -----END EC PRIVATE KEY-----