[PR #2287] [CLOSED] Bump pyjwt from 1.7.1 to 2.1.0 #2497

New issue

Closed

opened 2026-02-27 12:11:19 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 12:11:19 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/modoboa/modoboa/pull/2287
Author: @dependabot[bot]
Created: 6/27/2021
Status: ❌ Closed

Base: master ← Head: dependabot/pip/pyjwt-2.1.0

📝 Commits (1)

6d24aef Bump pyjwt from 1.7.1 to 2.1.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 requirements.txt (+1 -1)

📄 Description

Bumps pyjwt from 1.7.1 to 2.1.0.

Release notes

Sourced from pyjwt's releases.

2.1.0

Changelog

Changed

Allow claims validation without making JWT signature validation mandatory. #608

Fixed

Remove padding from JWK test data. #628

Make kty mandatory in JWK to be compliant with RFC7517. #624

Allow JWK without alg to be compliant with RFC7517. #624

Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. #645

Added

Add caching by default to PyJWKClient #611

Add missing exceptions.InvalidKeyError to jwt module __init__ imports #620

Add support for ES256K algorithm #629

Add from_jwk() to Ed25519Algorithm #621

Add to_jwk() to Ed25519Algorithm #643

Export PyJWK and PyJWKSet #652

2.0.1

Changelog

Changed

Rename CHANGELOG.md to CHANGELOG.rst and include in docs #597

Fixed

Fix from_jwk() for all algorithms #598

v2.0.0

Highlights

Introduce better experience for JWKs

Introduce PyJWK, PyJWKSet, and PyJWKClient.
import jwt
from jwt import PyJWKClient
token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik5FRTFRVVJCT1RNNE16STVSa0ZETlRZeE9UVTFNRGcyT0Rnd1EwVXpNVGsxUWpZeVJrUkZRdyJ9.eyJpc3MiOiJodHRwczovL2Rldi04N2V2eDlydS5hdXRoMC5jb20vIiwic3ViIjoiYVc0Q2NhNzl4UmVMV1V6MGFFMkg2a0QwTzNjWEJWdENAY2xpZW50cyIsImF1ZCI6Imh0dHBzOi8vZXhwZW5zZXMtYXBpIiwiaWF0IjoxNTcyMDA2OTU0LCJleHAiOjE1NzIwMDY5NjQsImF6cCI6ImFXNENjYTc5eFJlTFdVejBhRTJINmtEME8zY1hCVnRDIiwiZ3R5IjoiY2xpZW50LWNyZWRlbnRpYWxzIn0.PUxE7xn52aTCohGiWoSdMBZGiYAHwE5FYie0Y1qUT68IHSTXwXVd6hn02HTah6epvHHVKA2FqcFZ4GGv5VTHEvYpeggiiZMgbxFrmTEY0csL6VNkX1eaJGcuehwQCRBKRLL3zKmA5IKGy5GeUnIbpPHLHDxr-GXvgFzsdsyWlVQvPX2xjeaQ217r2PtxDeqjlf66UYl6oY6AqNS8DH3iryCvIfCcybRZkc_hdy-6ZMoKT6Piijvk_aXdm7-QQqKJFHLuEqrVSOuBqqiNfVrG27QzAPuPOxvfXTVLXL2jek5meH6n-VWgrBdoMFH93QEszEDowDAEhQPHVs0xj7SIzA"
kid = "NEE1QURBOTM4MzI5RkFDNTYxOTU1MDg2ODgwQ0UzMTk1QjYyRkRFQw"
url = "https://dev-87evx9ru.auth0.com/.well-known/jwks.json"
jwks_client = PyJWKClient(url)
</tr></table>

... (truncated)

Changelog

Sourced from pyjwt's changelog.

`v2.1.0 <https://github.com/jpadilla/pyjwt/compare/2.0.1...2.1.0>`__

Changed


- Allow claims validation without making JWT signature validation mandatory. `[#608](https://github.com/jpadilla/pyjwt/issues/608) <https://github.com/jpadilla/pyjwt/pull/608>`__
Fixed

- Remove padding from JWK test data. `[#628](https://github.com/jpadilla/pyjwt/issues/628) &lt;https://github.com/jpadilla/pyjwt/pull/628&gt;`__
- Make `kty` mandatory in JWK to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__
- Allow JWK without `alg` to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__
- Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `[#645](https://github.com/jpadilla/pyjwt/issues/645) &lt;https://github.com/jpadilla/pyjwt/pull/645&gt;`__
Added



Add caching by default to PyJWKClient [#611](https://github.com/jpadilla/pyjwt/issues/611) &lt;https://github.com/jpadilla/pyjwt/pull/611&gt;__
Add missing exceptions.InvalidKeyError to jwt module init imports [#620](https://github.com/jpadilla/pyjwt/issues/620) &lt;https://github.com/jpadilla/pyjwt/pull/620&gt;__
Add support for ES256K algorithm [#629](https://github.com/jpadilla/pyjwt/issues/629) &lt;https://github.com/jpadilla/pyjwt/pull/629&gt;__
Add from_jwk() to Ed25519Algorithm [#621](https://github.com/jpadilla/pyjwt/issues/621) &lt;https://github.com/jpadilla/pyjwt/pull/621&gt;__
Add to_jwk() to Ed25519Algorithm [#643](https://github.com/jpadilla/pyjwt/issues/643) &lt;https://github.com/jpadilla/pyjwt/pull/643&gt;__
Export PyJWK and PyJWKSet [#652](https://github.com/jpadilla/pyjwt/issues/652) &lt;https://github.com/jpadilla/pyjwt/pull/652&gt;__

v2.0.1 &lt;https://github.com/jpadilla/pyjwt/compare/2.0.0...2.0.1&gt;__
Changed

Rename CHANGELOG.md to CHANGELOG.rst and include in docs [#597](https://github.com/jpadilla/pyjwt/issues/597) <https://github.com/jpadilla/pyjwt/pull/597>__

Fixed


- Fix `from_jwk()` for all algorithms `[#598](https://github.com/jpadilla/pyjwt/issues/598) <https://github.com/jpadilla/pyjwt/pull/598>`__
Added

`v2.0.0 <https://github.com/jpadilla/pyjwt/compare/1.7.1...2.0.0>`__

Changed


Drop support for Python 2 and Python 3.0-3.5
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
</tr></table>

... (truncated)

Commits

79c23d7 Bump up version to v2.1.0 (#653)
c7f9ac5 Export PyJWK and PyJWKSet (#652)
816cbe5 [pre-commit.ci] pre-commit autoupdate (#650)
0da4223 Fix incorrect documentation for jwt (#651)
545931d Add to_jwk to Ed25519Algorithm. (#642) (#643)
7f6a236 Clearly warn against computing algorithms from the token’s alg (#647)
fb86f9d Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorit...
bcd5728 changed 'paramenter' to 'parameter' (#638)
fc7a708 [pre-commit.ci] pre-commit autoupdate (#640)
f02fa0d [pre-commit.ci] pre-commit autoupdate (#636)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/modoboa/modoboa/pull/2287 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/27/2021 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/pip/pyjwt-2.1.0` --- ### 📝 Commits (1) - [`6d24aef`](https://github.com/modoboa/modoboa/commit/6d24aef62058a2abc3fd9dfa4242df0c64c82b03) Bump pyjwt from 1.7.1 to 2.1.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.7.1 to 2.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/releases">pyjwt's releases</a>.</em></p> <blockquote> <h2>2.1.0</h2> <h1>Changelog</h1> <h2>Changed</h2> <ul> <li>Allow claims validation without making JWT signature validation mandatory. <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/608">#608</a></li> </ul> <h2>Fixed</h2> <ul> <li>Remove padding from JWK test data. <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/628">#628</a></li> <li>Make <code>kty</code> mandatory in JWK to be compliant with RFC7517. <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/624">#624</a></li> <li>Allow JWK without <code>alg</code> to be compliant with RFC7517. <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/624">#624</a></li> <li>Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/645">#645</a></li> </ul> <h2>Added</h2> <ul> <li>Add caching by default to PyJWKClient <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/611">#611</a></li> <li>Add missing exceptions.InvalidKeyError to jwt module <code>__init__</code> imports <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/620">#620</a></li> <li>Add support for ES256K algorithm <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/629">#629</a></li> <li>Add <code>from_jwk()</code> to Ed25519Algorithm <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/621">#621</a></li> <li>Add <code>to_jwk()</code> to Ed25519Algorithm <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/643">#643</a></li> <li>Export <code>PyJWK</code> and <code>PyJWKSet</code> <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/652">#652</a></li> </ul> <h2>2.0.1</h2> <h2>Changelog</h2> <h3>Changed</h3> <ul> <li>Rename CHANGELOG.md to CHANGELOG.rst and include in docs <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/597">#597</a></li> </ul> <h3>Fixed</h3> <ul> <li>Fix <code>from_jwk()</code> for all algorithms <a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/598">#598</a></li> </ul> <h2>v2.0.0</h2> <h3>Highlights</h3> <h4>Introduce better experience for JWKs</h4> <p>Introduce <code>PyJWK</code>, <code>PyJWKSet</code>, and <code>PyJWKClient</code>.</p> <pre lang="python"><code>import jwt from jwt import PyJWKClient <p>token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik5FRTFRVVJCT1RNNE16STVSa0ZETlRZeE9UVTFNRGcyT0Rnd1EwVXpNVGsxUWpZeVJrUkZRdyJ9.eyJpc3MiOiJodHRwczovL2Rldi04N2V2eDlydS5hdXRoMC5jb20vIiwic3ViIjoiYVc0Q2NhNzl4UmVMV1V6MGFFMkg2a0QwTzNjWEJWdENAY2xpZW50cyIsImF1ZCI6Imh0dHBzOi8vZXhwZW5zZXMtYXBpIiwiaWF0IjoxNTcyMDA2OTU0LCJleHAiOjE1NzIwMDY5NjQsImF6cCI6ImFXNENjYTc5eFJlTFdVejBhRTJINmtEME8zY1hCVnRDIiwiZ3R5IjoiY2xpZW50LWNyZWRlbnRpYWxzIn0.PUxE7xn52aTCohGiWoSdMBZGiYAHwE5FYie0Y1qUT68IHSTXwXVd6hn02HTah6epvHHVKA2FqcFZ4GGv5VTHEvYpeggiiZMgbxFrmTEY0csL6VNkX1eaJGcuehwQCRBKRLL3zKmA5IKGy5GeUnIbpPHLHDxr-GXvgFzsdsyWlVQvPX2xjeaQ217r2PtxDeqjlf66UYl6oY6AqNS8DH3iryCvIfCcybRZkc_hdy-6ZMoKT6Piijvk_aXdm7-QQqKJFHLuEqrVSOuBqqiNfVrG27QzAPuPOxvfXTVLXL2jek5meH6n-VWgrBdoMFH93QEszEDowDAEhQPHVs0xj7SIzA" kid = "NEE1QURBOTM4MzI5RkFDNTYxOTU1MDg2ODgwQ0UzMTk1QjYyRkRFQw" url = "<a href="https://dev-87evx9ru.auth0.com/.well-known/jwks.json">https://dev-87evx9ru.auth0.com/.well-known/jwks.json</a>"</p> <p>jwks_client = PyJWKClient(url) </tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's changelog</a>.</em></p> <blockquote> <h2><code>v2.1.0 <https://github.com/jpadilla/pyjwt/compare/2.0.1...2.1.0></code>__</h2> <p>Changed</p> <pre><code> - Allow claims validation without making JWT signature validation mandatory. `[#608](https://github.com/jpadilla/pyjwt/issues/608) <https://github.com/jpadilla/pyjwt/pull/608>`__ <p>Fixed</p> <pre><code> - Remove padding from JWK test data. `[#628](https://github.com/jpadilla/pyjwt/issues/628) &lt;https://github.com/jpadilla/pyjwt/pull/628&gt;`__ - Make `kty` mandatory in JWK to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__ - Allow JWK without `alg` to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__ - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `[#645](https://github.com/jpadilla/pyjwt/issues/645) &lt;https://github.com/jpadilla/pyjwt/pull/645&gt;`__ Added </code></pre> <ul> <li>Add caching by default to PyJWKClient <code>[#611](https://github.com/jpadilla/pyjwt/issues/611) &lt;https://github.com/jpadilla/pyjwt/pull/611&gt;</code>__</li> <li>Add missing exceptions.InvalidKeyError to jwt module <strong>init</strong> imports <code>[#620](https://github.com/jpadilla/pyjwt/issues/620) &lt;https://github.com/jpadilla/pyjwt/pull/620&gt;</code>__</li> <li>Add support for ES256K algorithm <code>[#629](https://github.com/jpadilla/pyjwt/issues/629) &lt;https://github.com/jpadilla/pyjwt/pull/629&gt;</code>__</li> <li>Add <code>from_jwk()</code> to Ed25519Algorithm <code>[#621](https://github.com/jpadilla/pyjwt/issues/621) &lt;https://github.com/jpadilla/pyjwt/pull/621&gt;</code>__</li> <li>Add <code>to_jwk()</code> to Ed25519Algorithm <code>[#643](https://github.com/jpadilla/pyjwt/issues/643) &lt;https://github.com/jpadilla/pyjwt/pull/643&gt;</code>__</li> <li>Export <code>PyJWK</code> and <code>PyJWKSet</code> <code>[#652](https://github.com/jpadilla/pyjwt/issues/652) &lt;https://github.com/jpadilla/pyjwt/pull/652&gt;</code>__</li> </ul> <h2><code>v2.0.1 &lt;https://github.com/jpadilla/pyjwt/compare/2.0.0...2.0.1&gt;</code>__</h2> <p>Changed </code></pre></p> <ul> <li>Rename CHANGELOG.md to CHANGELOG.rst and include in docs <code>[#597](https://github.com/jpadilla/pyjwt/issues/597) <https://github.com/jpadilla/pyjwt/pull/597></code>__</li> </ul> <p>Fixed</p> <pre><code> - Fix `from_jwk()` for all algorithms `[#598](https://github.com/jpadilla/pyjwt/issues/598) <https://github.com/jpadilla/pyjwt/pull/598>`__ <p>Added </code></pre></p> <h2><code>v2.0.0 <https://github.com/jpadilla/pyjwt/compare/1.7.1...2.0.0></code>__</h2> <p>Changed</p> <pre><code> Drop support for Python 2 and Python 3.0-3.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jpadilla/pyjwt/commit/79c23d7d9d32364be8f94680d8eda7135c3a15d5"><code>79c23d7</code></a> Bump up version to v2.1.0 (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/653">#653</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/c7f9ac57021021aecc417ffb580c6799ad1ead84"><code>c7f9ac5</code></a> Export PyJWK and PyJWKSet (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/652">#652</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/816cbe59a43c4ab5466e6d4c5fa393223c26953f"><code>816cbe5</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/650">#650</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/0da422394be3555d5b3cb52761864d2819787eff"><code>0da4223</code></a> Fix incorrect documentation for jwt (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/651">#651</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/545931dafd9ec318e8d8acff6d5a4daeedf50863"><code>545931d</code></a> Add to_jwk to Ed25519Algorithm. (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/642">#642</a>) (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/643">#643</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/7f6a2361943ffae20007eb014900060c6b21d9cc"><code>7f6a236</code></a> Clearly warn against computing algorithms from the token’s alg (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/647">#647</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/fb86f9dffb371ee2adbc573edc35ded129ea3b36"><code>fb86f9d</code></a> Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorit...</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/bcd572806c121c2f85d104b3e13a196e5bb46a79"><code>bcd5728</code></a> changed 'paramenter' to 'parameter' (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/638">#638</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/fc7a708149d7fc75a9053b76129067c98b49d09f"><code>fc7a708</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/640">#640</a>)</li> <li><a href="https://github.com/jpadilla/pyjwt/commit/f02fa0dc87bfa7bc471f3d6d3ca579d66e8f95e0"><code>f02fa0d</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://github-redirect.dependabot.com/jpadilla/pyjwt/issues/636">#636</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jpadilla/pyjwt/compare/1.7.1...2.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=pip&previous-version=1.7.1&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>