Uh oh!
There was an error while loading. Please reload this page.
Use OIC instead of Python-Jose - #48
Conversation
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Co-authored-by: Rémy HUBSCHER <hubscher.remy@gmail.com>
Co-authored-by: Rémy HUBSCHER <hubscher.remy@gmail.com>
keaton185
commented
May 29, 2024
@robert-mings for visibility 👀 |
dreid
commented
Jun 7, 2024
Introducing a dependency on OIC would cause a pretty significant explosion in transitive dependencies of this package. https://github.com/CZ-NIC/pyoidc/blob/master/setup.py#L86-L95 And it seems like overkill to bring in a "complete OpenID Connect implementation" just for the couple of JWK related functions actually used. PyJWT as implemented in #49 in contrast only really depends on the standard library and the well maintained and very popular cryptography package. |
Natim
commented
Jun 10, 2024
Robert is off until June 24th, let's wait for his return to see if we can cut a release. |
robert-mings
commented
Aug 1, 2024
Thanks for the willingness to contribute @keaton185! We've moved ahead with the |
Context
This package indirectly uses python-jose, which is affected by: GHSA-cjwg-qfpm-7377 which additionally seems to be abandoned by it's maintainers.
Move this package to use OIC to generate the JWK instead.