Use PyJWT 2.1.0 or later (as used by Home Assistant)

jschlyter · jschlyter · commit e8eaa50e58bf · 2021-10-07T08:10:59.000+02:00
diff --git a/CHANGES.md b/CHANGES.md
@@ -1,5 +1,9 @@
 # Release Notes
 
+## 1.4.4 (2021-10-07)
+
+- Use PyJWT 2.1.0 or later (as used by Home Assistant)
+
 ## 1.4.3 (2021-07-02)
 
 - Update default API base URL
diff --git a/chargeamps/external.py b/chargeamps/external.py
@@ -51,7 +51,7 @@ async def _ensure_token(self):
                 json={"email": self._email, "password": self._password},
             )
             self._token = (await response.json())["token"]
-            token_payload = jwt.decode(self._token, verify=False)
+            token_payload = jwt.decode(self._token, options={"verify_signature": False})
             self._token_expire = token_payload.get("exp", 0)
             self._headers["Authorization"] = f"Bearer {self._token}"
 
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -5,7 +5,7 @@ profile = "black"
 
 [tool.poetry]
 name = "chargeamps"
-version = "1.4.3"
+version = "1.4.4"
 readme = "README.md"
 description = "Charge-Amps API bindings for Python"
 authors = ["Jakob Schlyter <jakob@kirei.se>"]
@@ -32,7 +32,7 @@ asyncio = "^3.4.3"
 dataclasses-json = "^0.5.2"
 isodate = "^0.6.0"
 marshmallow = "^3.9.0"
-PyJWT = "^1.7.1"
+PyJWT = "^2.1.0"
 
 [tool.poetry.dev-dependencies]
 black = "^20.8b1"

Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,7 @@ async def _ensure_token(self):`
`51`	`51`	`json={"email": self._email, "password": self._password},`
`52`	`52`	`)`
`53`	`53`	`self._token = (await response.json())["token"]`
`54`		`- token_payload = jwt.decode(self._token, verify=False)`
	`54`	`+ token_payload = jwt.decode(self._token, options={"verify_signature": False})`
`55`	`55`	`self._token_expire = token_payload.get("exp", 0)`
`56`	`56`	`self._headers["Authorization"] = f"Bearer {self._token}"`
`57`	`57`