mozilla-releng / balrog / #5775

91%

main: 91%

Pull #3921

circleci

Migrate from python-jose to PyJWT

python-jose is only used to verify Auth0 access tokens in
auslib.util.auth, and pyjwt is already a dependency, so switch to it.

Tokens with an invalid signature now return a 401 instead of an
unhandled exception, and tokens missing aud/iss claims are rejected.

2236 of 2606 branches covered (85.8%)

Branch coverage included in aggregate %.

8 of 8 new or added lines in 1 file covered. (100.0%)

5896 of 6377 relevant lines covered (92.46%)

0.92 hits per line