wagnerdelima / drf-social-oauth2

drf-social-oauth2 makes it easy to integrate Django social authentication with major OAuth2 providers, i.e., Facebook, Twitter, Google, etc.

https://drf-social-oauth2.readthedocs.io/en/latest/

MIT License

269 stars 34 forks source link

chore: switch from jose to pyjwt #207

Closed t16n closed 3 months ago

t16n commented 5 months ago

Description

The python-jose project is not being maintained anymore.

The project is using an outdated dependency: ecdsa

Fixes # (issue) Minerva timing attack on P-256 in python-ecdsa

There already is an issue on the python-jose project, with no reaction by the authors: https://github.com/mpdavis/python-jose/issues/341

This PR switches python-jose to PyJWT

Checklist

[x] Do unit tests run with no errors?
[x] Has coverage not decreased?
[x] Is your code concise and clean?
[x] Are the conf.py and installation sphinx updated with the new version?
[x] Is the init.py version variable updated?