lepture / authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.
https://authlib.org/
BSD 3-Clause "New" or "Revised" License
4.39k stars 436 forks source link

Extract load_key construction to separate method #656

Closed borislaviv closed 2 weeks ago

borislaviv commented 4 weeks ago

This approach allows implementors to define custom key selection strategy without need to override the entire parse_id_token method.

DO NOT SEND ANY SECURITY FIX HERE. Please read "Security Reporting" section on README.

What kind of change does this PR introduce? (check at least one)

Does this PR introduce a breaking change? (check one)

If yes, please describe the impact and migration path for existing applications:

(If no, please delete the above question and this text message.)