You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Docs: Refactored docs with ``autodoc``; added ``PyJWS`` and ``jwt.algorithms`` docs by @pachewise in `#1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
47
45
- Docs: Documentation improvements for "sub" and "jti" claims by @cleder in `#1088 <https://github.com/jpadilla/pyjwt/pull/1088>`__
48
46
- Development: Add pyupgrade as a pre-commit hook by @kurtmckee in `#1109 <https://github.com/jpadilla/pyjwt/pull/1109>`__
47
+
- Add minimum key length validation for HMAC and RSA keys (CWE-326).
48
+
Warns by default via ``InsecureKeyLengthWarning`` when keys are below
49
+
minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and
50
+
NIST SP 800-131A (RSA). Pass ``enforce_minimum_key_length=True`` in
51
+
options to ``PyJWT`` or ``PyJWS`` to raise ``InvalidKeyError`` instead.
52
+
- Refactor ``PyJWT`` to own an internal ``PyJWS`` instance instead of
0 commit comments