uc-cdis / authutils

80%

master: 80%

LAST BUILD ON BRANCH 9.0.0

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• 6.2.5
• 6.2.6
• 6.2.7
• 7.0.0
• 7.1.0
• 7.1.1
• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.2.5
• 7.2.6
• 7.2.7
• 7.2.8
• 8.0.0
• 8.0.1
• 9.0.0
• add-debug-log-wf
• ao-cryptography-bump
• chore/bump-authlib
• chore/bump-authutils
• chore/relock-authutils
• chore/remove-aud-check
• chore/update-authutils
• chore/update-cryptography
• chore/update-version-7.2.7
• chore/update-werkzeug
• dependabot/pip/authlib-1.6.4
• dependabot/pip/authlib-1.6.5
• dependabot/pip/cryptography-46.0.5
• dependabot/pip/flask-3.1.3
• dependabot/pip/jinja2-3.1.6
• dependabot/pip/requests-2.32.4
• dependabot/pip/urllib3-2.5.0
• dependabot/pip/urllib3-2.6.0
• dependabot/pip/urllib3-2.6.3
• dependabot/pip/werkzeug-3.1.4
• dependabot/pip/werkzeug-3.1.5
• dependabot/pip/werkzeug-3.1.6
• fastapi-force-issuer
• feat/3.13
• feat/dpop
• feat/jq-testing
• feat/no-aud-check
• fix/cryptography-update
• fix/deps
• master
• minor-update
• package-update
• paulineribeyre-patch-1
• pin-authlib
• revert-108-chore/update-cryptography
• support-client-creds
• test/aud
• update-deps
• update-feat/jq-testing
• v7.1.0
• validate-aud

Build # 37519693850

Build Type

push

github

Committed by web-flow

Commit Message

Feat/dpop (#113)

* feat(dpop): initial dpop support

* feat(dpop): return more info in validate call

* feat(jwt): validate handles pur, and denylist, more closely match typical non-general flask validation. more tests

* fix(dpop): handle rsa keys, improve return of dpop functions, more tests

* feat(secret): allow passing through shared secret for nonce (so it can be passed from config)

* chore(deps): increase min version of pyjwt for required types

* chore(dpop): make compute_ath public

* fix(nonce): return new nonce on error

* chore(logs): debug logs

* fix(dpop): helpful error with invalid token info passed

* fix(dpop): correct nonce error handling per the spec

* chore(dpop): debug lines

* chore(dpop): update error

* temp(dpop): debug lines

* fix(dpop): handle dpop prefix in header

* chore(dpop): debug lines

* fix(dpop): safely handle dpop header

* chore(dpop): log ath

* chore(dpop): more logs

* chore(dpop): increase timeout and more logs on public key fetching

* fix(keys): handle custom and official public keys endpoints

* chore(logs): update log levels

* fix(dpop): increase public keys timeout

* chore(dpop): more logs

* chore(dpop): more logging

* chore(tools): update and small black fixes

* feat(dpop): migrate to httpx2, edge cases, cleanup,  tests

* fix(issuers): require allowed_iss, don't blindly allow all

* fix(security): jti callback last, clarify error, add missing timeout to httpx2 call

* chore(deps): relock

* fix(dpop): percent-decode for url comparisons, add tests

* Update src/authutils/token/core.py

Co-authored-by: Sai Shanmukha Narumanchi <nss10@outlook.com>

* Update src/authutils/errors.py

Co-authored-by: Sai Shanmukha Narumanchi <nss10@outlook.com>

* Update tests/test_jwt.py

Co-authored-by: Sai Shanmukha Narumanchi <nss10@outlook.com>

* fix(dpop): various fixes from review

* fix(dpop): fix based on reviews

* feat(tests): remove anyio, use asyncio

---------

Co-authored-by: Sai Shanmukha Narumanch... (continued)

Coverage Stats

794 of 989 relevant lines covered (80.28%)

0.8 hits per line