Netflix / bless / 165 / 1

95%

master: 95%

Pull #100

travis-ci

Fix marshmellow verison, and prevent jose from verifying access token hash

* Pin marshmellow to a version less than 3. This might be fixed in #99
* Disable at_hash verification if present in the JWT, since the bless lambda doesn't have access to the a hash of the access token.

231 of 247 branches covered (93.52%)

751 of 791 relevant lines covered (94.94%)

0.95 hits per line