Replace pyjwkest - Githubissues

edx / edx-arch-experiments

A plugin to include applications under development by the architecture team at edx

GNU Affero General Public License v3.0

0 stars 3 forks source link

Replace pyjwkest #186

Open iamsobanjaved opened 1 year ago

iamsobanjaved commented 1 year ago

The pyjwkest package was abandoned upstream more than 3 years ago. Let's replace it with something more actively maintained. First, check to see if the latest version of PyJWT (already used here) supports what we need from pyjwkest. If not, replace it with cryptojwt as it is from the same author and actively maintained. Also, this package has a similar interface to the one which is being replaced.

### Tasks

timmc-edx commented 1 year ago

It looks like https://github.com/openedx/xblock-lti-consumer and https://github.com/edx/token-utils include it as well. I'm talking with the owners of edx-token-utils about switching over, and making sure their public and private keys are ready for the change.

For reference, these are the two config-related issues that need to be addressed for each deployer:

https://github.com/openedx/edx-drf-extensions/issues/346 - whitespace in Base64
https://github.com/edx/edx-arch-experiments/issues/261 - private key optional params

jristau1984 commented 4 months ago

@iamsobanjaved can you review and comment if this is still a valid issue to keep alive? If so, should it be in the Arch- or Arbi-BOM board?

iamsobanjaved commented 4 months ago

I created this issue to track it across multiple repos. It is currently pending in 2 repos; I will add those in tasklist. We will be picking up on pending repos this quarter.

UsamaSadiq commented 1 month ago

Waiting for the owning team testing on this issue. Tracking testing in the issue https://2u-internal.atlassian.net/browse/COSMO-537.