summaryrefslogtreecommitdiff
path: root/jwt/__init__.py
Commit message (Collapse)AuthorAgeFilesLines
* Cleanup __init__ moduleJosé Padilla2015-01-181-234/+12
| | | | | - Expose public API - Move exceptions to separate module - Use relative imports
* Tweak comment blocksJosé Padilla2015-01-181-1/+3
|
* Added comments for algorithms module and register_algorithm.Mark Adams2015-01-181-0/+1
|
* Fixed a couple of anomalies after the last rebase.Mark Adams2015-01-181-3/+2
|
* Moved jwt.algorithms imports back to their original locationMark Adams2015-01-181-1/+1
|
* Fixed some style issues (reordered imports, removed unused imports, PEP8, etc.)Mark Adams2015-01-181-6/+8
|
* Created utils.py to hold functions like constant_time_compare and ↵Mark Adams2015-01-181-14/+1
| | | | base64-encoding
* Fixes #70. Refactored all HMAC, RSA, and EC code into seperate classes in ↵Mark Adams2015-01-181-175/+23
| | | | | | the algorithms module Added register_algorithm to add new algorithms.
* Drop usage of unicode_literals in all modulesWouter Bolsterlee2015-01-121-1/+0
|
* Bump up version0.4.1José Padilla2015-01-081-1/+1
|
* Fix missing comma in __all__José Padilla2015-01-081-1/+1
|
* Handle string and text types like sixJosé Padilla2015-01-081-12/+13
|
* Add timedelta_total_seconds compat branchingJosé Padilla2015-01-071-2/+3
|
* Handle compatibility branching in a compat moduleJosé Padilla2015-01-071-45/+2
|
* Also make sure audience claims in token contain only stringsWouter Bolsterlee2015-01-071-0/+2
| | | | | | The spec mandates that the audience claims must be strings (or a single string). Without this check, an `audience=None` argument to decode() would succeeed when the token contained a claim like ['urn:foo', null].
* Correctly implement audience claim verificationWouter Bolsterlee2015-01-071-7/+14
| | | | | | | | | A JWT may contain one or more audience claims. If present, an application must check its own value against the claims in the JWT. In case a token does not contain an audience claim, the application must not specifify one either. See #72 for discussion.
* Rename exceptions that don't have Error in their nameWouter Bolsterlee2015-01-061-9/+27
| | | | | ...but keep the old names around as deprecated aliases for backward compatibility.
* Rename InvalidToken exception to InvalidTokenErrorWouter Bolsterlee2015-01-061-6/+6
| | | | ...as discussed in #60.
* Add a base InvalidToken exception for others to extendWouter Bolsterlee2015-01-061-6/+10
|
* Merge pull request #66 from wbolster/issue-65José Padilla2015-01-061-0/+4
|\ | | | | Verify that decoded header and payload are json objects
| * Verify that decoded header and payload are json objectsWouter Bolsterlee2015-01-061-0/+4
| | | | | | | | Fixes #65.
* | Drop unneeded **kwargs magicWouter Bolsterlee2015-01-061-9/+3
|/ | | | Fixes #61.
* Merge pull request #64 from wbolster/issue-63José Padilla2015-01-051-20/+24
|\ | | | | Use constant time string comparison routine from hmac module
| * Use constant time string comparison routine from hmac moduleWouter Bolsterlee2015-01-051-20/+24
| | | | | | | | | | | | ...and only use the current implementation as a fallback. Fixes #63.
* | Add Python 2.6 compatibility for leeway as timedeltaWouter Bolsterlee2015-01-051-1/+8
| |
* | Allow datetime.timedelta instances for leeway argumentWouter Bolsterlee2015-01-051-1/+5
|/
* Remove unused importJosé Padilla2014-12-311-2/+3
|
* Fixes #55José Padilla2014-12-311-2/+2
|
* Update public API. Closes #53José Padilla2014-12-311-1/+4
|
* Fixed version for release0.4.0José Padilla2014-12-231-1/+1
|
* Incremented version to 0.4Mark Adams2014-12-201-1/+1
|
* Added some missing ensure_bytes in a couple of the tests.Mark Adams2014-12-181-1/+3
| | | | | Consolidated testing variables for has_rsa and has_ecdsa into has_crypto. Updated README and dependencies in tox.ini
* Modified ECDSA algorithms to use cryptography library instead of ecdsa.Mark Adams2014-12-181-21/+30
|
* Modified RSA algorithms to use cryptography library instead of PyCryptoMark Adams2014-12-181-14/+45
|
* Removed some unnecessary references to PyCrypto's Crypto.Hash functions in ↵Mark Adams2014-12-171-3/+0
| | | | the ECDSA code since it uses hashlib functions anyways. This removes an ECDSA dependency on PyCrypto.
* Bump up version for release0.3.2José Padilla2014-12-131-7/+13
|
* Added functionality and test.defyrlt2014-12-141-3/+7
|
* Bump up version for release0.3.1José Padilla2014-12-031-1/+1
|
* Merge pull request #48 from skion/headerJeff Lindsay2014-11-261-2/+4
|\ | | | | Let `header()` support unicode input, like `decode()`.
| * Let `header()` support unicode input, like `decode()`.Pieter Ennes2014-11-261-2/+4
| |
* | Bump up version for release0.3.0José Padilla2014-10-221-1/+1
| |
* | Implement Audience and Issuer claimsJosé Padilla2014-10-221-3/+32
| |
* | Cleanup prepare key methods and use single quotesJosé Padilla2014-10-211-7/+10
| |
* | Merge pull request #40 from sullivanmatt/masterJosé Padilla2014-10-211-0/+49
|\ \ | | | | | | Support for Elliptic Curve signatures (ES256 / ES384 / ES512)
| * \ Merging in from latest master; resolving merge conflictsMatthew Sullivan2014-10-161-23/+44
| |\ \ | | |/
| * | Merge pull request #1 from progrium/masterMatthew Sullivan2014-09-221-5/+4
| |\ \ | | | | | | | | Merge in base master at a99f40
| * | | Fixing signature R and S value encoding, add tests for itMatthew Sullivan2014-09-221-6/+6
| | | |
| * | | Adding ES256/384/512 supportMatthew Sullivan2014-09-201-0/+49
| | | |
* | | | Remove redundant check for alg="none".Pieter Ennes2014-10-211-3/+0
| | | |
* | | | Verify method for alg="none" was redundant.Pieter Ennes2014-10-211-1/+0
| | | |