36478110477
91%

Ran 28 Sep 2026 08:28PM UTC

Jobs 1

Files 1035

Run time 3min

Badge

Embed ▾

Committed 28 Sep 2026 07:55PM UTC coverage: 90.908%. Remained the same

Build # 36478110477

Build Type

push

github

Committed by

np5

Commit Message

Bump PyJWT to 2.15.1

2.15.1 has one change (jpadilla/pyjwt#1216), in the base64url decoder of the
JWS segments. 2.15.0 rejected a segment that ends in "=" padding with
"Invalid crypto padding". 2.15.1 accepts the padding if it is correct: one or
two "=" characters that complete the last 4-character group. Padding that is
too long, and characters that are not in the alphabet, are still rejected, and
the decoded value must encode back to the same segment without its padding.

In Zentral, this affects zentral.utils.oidc.verify_jws: the OIDC API token
issuer auth view and the ID token of an OpenID Connect realm. An issuer that
pads the signature segment, as AWS ALB does, now gets a verified token instead
of a 400. A padded token with a correct signature and an unpadded token with a
correct signature decode to the same bytes, and the signature is calculated
on the header and payload segments as they are sent. Thus padding does not
let a token through that 2.15.0 would not verify without the padding.

The cost is that one token now has two string forms that both verify. No
Zentral code keeps or compares the token string, so this has no effect here.

The dependency metadata is the same for 2.15.0 and 2.15.1, so no other pin
moves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Coverage Stats

52830 of 58114 relevant lines covered (90.91%)

0.91 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	36478110477.1	28 Sep 2026 08:28PM UTC	1035	90.91	GitHub Action Run

zentralopensource / zentral / 36478110477
91%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 36478110477

zentralopensource / zentral / 36478110477 91%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 36478110477

zentralopensource / zentral / 36478110477
91%

README BADGES
x