Pin python-jose to latest version 1.3.2

[pyup-bot]

python-jose is not pinned to a specific version.

I'm pinning it to the latest version 1.3.2 for now.

These links might come in handy: PyPI | Changelog | Repo

Changelog

1.3.2

Bugfixes

• Use constant time string comparisons for HMAC keys

1.3.1

Bugfixes

• Handle errors with lists of keys

1.3.0

New Features

• Support for Firebase certs

1.2.0

New Features

• Allows multiple values for 'iss'

1.1.0

New Features

• Support for JWK sets
• Support for at_hash verification
• Minor documentation updates

1.0.0

JWK Support

JWKs are now supported as first class objects.

JWK Improvements

0.7.0

Fixes

• Remove builtins dependency which broke AppEngine support

0.6.2

New features

• Allow users to validate a specific subject

0.6.1

Fix missing future dependency for python2.

My apologies for breaking 0.6.0.

0.6.0

JWS API Changes

A couple of alterations to the JWS API to account for strings to be signed as opposed to only JSON objects.

If you pass jws.sign() a string, it will no longer try to parse it as a JSON object. Additionally, jws.verify() now returns a string instead of attempting to load that string as a JSON object.

Strings are perfectly valid JWS payloads.

The extra step of loading the JSON object has been moved to jwt.decode() because that is required to be a JSON object.

RSA JWKs

A JWK dictionary can now be passed directly to RSAKey.prepare_key() in order to construct that key. Once this works for every key type, I am going to bump to version 1.0.

0.5.6

Relaxed requirements.

0.5.5

Handling signature verification errors with a better message.

0.5.4

Added support for PyPy.

0.5.3

Add custom headers support to jwt.encode

0.5.2

Add get_unverified_headers and get_unverified_claims methods to jws and jwt.

0.5.1

Removed unused files.

0.5.0

Python 3 support

python-jose is now python 3 compatible.

0.2.0

ECDSA Support

ECDSA signatures are now supported.

0.1.5

Initial Release

At this point, python-jose is ready to be used for JWS and JWT signing. The API and versioning are set and stable and predictable.

From here, the focus will be expanding algorithm usage to include ECSDA and RSA PSS signing.

After that, JWE and then JWK functionality.

This library will focus on using the PyCrypto library instead of moving to cryptography for easier Google App Engine support.

Got merge conflicts? Close this PR and delete the branch. I'll create a new PR for you.

Happy merging! 🤖