Revert key_use ver back to sig

Signed-off-by: Ivan Kanakarakis <[email protected]>

Author: c00kiemon5ter

src/cryptojwt/key_issuer.py

@@ -297,7 +297,7 @@ def get(self, key_use, key_type="", kid=None, alg="", **kwargs):
             else:
                 _bkeys = bundle.keys()
             for key in _bkeys:
-                if key.inactive_since and key_use != "ver":
+                if key.inactive_since and key_use != "sig":
                     # Skip inactive keys unless for signature verification
                     continue
                 if not key.use or use == key.use:

src/cryptojwt/key_jar.py

@@ -601,13 +601,13 @@ def get_jwt_verify_keys(self, jwt, **kwargs):
                     except KeyError:
                         pass
 
-            keys = self._add_key([], _iss, "ver", _key_type, _kid, nki, allow_missing_kid)
+            keys = self._add_key([], _iss, "sig", _key_type, _kid, nki, allow_missing_kid)
 
             if _key_type == "oct":
-                keys.extend(self.get(key_use="ver", issuer_id="", key_type=_key_type))
+                keys.extend(self.get(key_use="sig", issuer_id="", key_type=_key_type))
         else:
             # No issuer, just use all keys I have
-            keys = self.get(key_use="ver", issuer_id="", key_type=_key_type)
+            keys = self.get(key_use="sig", issuer_id="", key_type=_key_type)
 
         # Only want the appropriate keys.
         keys = [k for k in keys if k.appropriate_for("verify")]

tests/test_04_key_jar.py

@@ -750,7 +750,7 @@ def test_inactive_verify_key(self):
         _jwt = factory(self.sjwt_b)
         self.alice_keyjar.return_issuer("Bob")[0].mark_all_as_inactive()
         keys = self.alice_keyjar.get_jwt_verify_keys(_jwt.jwt)
-        assert len(keys) == 1
+        assert len(keys) == 0
 
 
 def test_copy():