python/python-python-jose
SHA256
14
0
Fork 0
forked from pool/python-python-jose
Code Pull Requests Activity
11 Commits 1 Branch 0 Tags
aee0a0194a121557f589a7d0c12893fbc0a1898f473b007f392607ed63620af7
Commit Graph

10 Commits

Author SHA256 Message Date
Nico Krapp
aee0a0194a Accepting request 1275023 from home:yeey:branches:devel:languages:python 
- Update to 3.4.0
  * Remove support for Python 3.6 and 3.7
  * Added support for Python 3.10 and 3.11
  * Updating CryptographyAESKey::encrypt to generate 96 bit IVs for
    GCM block cipher mode
  * Fix for PEM key comparisons caused by line lengths and new lines
  * Fix for CVE-2024-33664 - JWE limited to 250KiB
  * Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  * Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
- Removed patches CVE-2024-33663.patch,  CVE-2024-33664.patch,
  fix-tests-ecdsa-019.patch, and unpin-deps.patch as they have been
  incorporated into release 3.4.0

OBS-URL: https://build.opensuse.org/request/show/1275023
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=19
 2025-05-07 08:13:41 +00:00
Daniel Garcia
60ce9b52e2 - Update CVE-2024-33664.patch with upstream 
https://github.com/mpdavis/python-jose/pull/352
  bsc#1223422

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=17
 2024-06-03 07:39:12 +00:00
Daniel Garcia
cd84edb32d - Make python-pycryptodome dependency only required for Factory. 
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=15
 2024-05-07 09:59:10 +00:00
Daniel Garcia
ff2ca96bea - Add upstream patches: 
* CVE-2024-33663.patch, bsc#1223417, gh#mpdavis/python-jose#349
   * CVE-2024-33664.patch, bsc#1223422, gh#mpdavis/python-jose#345
   * fix-tests-ecdsa-019.patch, gh#mpdavis/python-jose#350

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=13
 2024-05-06 09:15:25 +00:00
Markéta Machová
c5fe7c4cfd Accepting request 1092869 from home:ecsos:python 
- Add %{?sle15_python_module_pythons}

OBS-URL: https://build.opensuse.org/request/show/1092869
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=11
 2023-06-14 06:23:04 +00:00
Matej Cepl
930eaed495 Accepting request 979755 from home:bnavigator:branches:devel:languages:python 
- Update to 3.3.0
  * Remove support for python 2.7 & 3.5
  * Add support for Python 3.9
  * Remove PyCrypto backend
  * Fix deprecation warning from cryptography backend
- Add rpm subpackages for the extra backend selection.  The missing
  requires were only discovered because other packages started to
  fail.
  * setup.py and README still mention pycrypto and pycryptodome, but
    it was removed from the code.
  * Test in flavors
- Refresh unpin-deps.patch

OBS-URL: https://build.opensuse.org/request/show/979755
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=9
 2022-05-29 20:52:04 +00:00
Tomáš Chvátal
ae214757e3 Accepting request 824502 from home:mcalabkova:branches:devel:languages:python 
- Update to 3.2.0
  * This will be the last release supporting Python 2.7, 3.5, and the PyCrypto
    backend.
  * Use hmac.compare_digest instead of our own constant_time_string_compare #163
  * Fix `to_dict` output, which should always be JSON encodeable. #139 and #165
    (fixes #127 and #137)
  * Require setuptools >= 39.2.0 #167 (fixes #161)
  * Emit a warning when verifying with a private key #168 (fixes #53 and #142)
  * Avoid loading python-ecdsa when using the cryptography backend, and pinned
    python-ecdsa dependency to <0.15 #178
- Rebase patch unpin-deps.patch

OBS-URL: https://build.opensuse.org/request/show/824502
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=7
 2020-08-06 05:42:30 +00:00
Tomáš Chvátal
63774861c2 - Update to 3.1.0: 
* Improve JWT.decode() #76 (fixes #75)
  * ort headers when serializing to allow for headless JWT #136 (fixes #80)
  * djust dependency handling
  * se PyCryptodome instead of PyCrypto #83
  * pdate package dependencies #124 (fixes #158)
  * void using deprecated methods #85
  * upport X509 certificates #107
  * solate and flesh out cryptographic backends to enable independent operation #129 (fixes #114)
  * emove pyca/cryptography backend's dependency on python-ecdsa #117
  * Remove pycrypto/dome backends' dependency on python-rsa #121
  * Make pyca/cryptography backend the preferred backend if multiple backends are present #122
- Rebase patch unpin-deps.patch

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=5
 2020-03-10 10:06:24 +00:00
Tomáš Chvátal
d907e187d3 Accepting request 693036 from home:jayvdb:django 
- Activate test suite, using GitHub archive
- Add unpin-deps.patch to fix broken installed egg-info,
  and remove unused dependency on python-future
- Remove undesirable < comparator in build and runtime dependencies,
  and remove duplicated dependencies

OBS-URL: https://build.opensuse.org/request/show/693036
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=3
 2019-04-11 09:00:34 +00:00
Todd R
a51d883c69 Accepting request 652698 from home:TheBlackCat:branches:devel:languages:python:misc 
Required by python-moto

OBS-URL: https://build.opensuse.org/request/show/652698
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-python-jose?expand=0&rev=1
 2018-11-29 21:01:41 +00:00