ciocore 8.1.1rc1__py2.py3-none-any.whl → 8.1.1rc3__py2.py3-none-any.whl

ciocore/VERSION

@@ -1 +1 @@
-8.1.1-rc.1
+8.1.1-rc.3

ciocore/api_client.py

@@ -445,7 +445,7 @@ def creds_same_domain(creds):
     if not token:
         return False
 
-    decoded = jwt.decode(creds["access_token"], verify=False)
+    decoded = jwt.decode(creds["access_token"], verify=False, algorithms=['RS256'], options={"verify_signature": False})
     audience_domain = decoded.get("aud")
     return (
         audience_domain
@@ -463,7 +463,7 @@ def account_id_from_jwt(token):
     Returns:
         str: The account id.
     """
-    payload = jwt.decode(token, verify=False)
+    payload = jwt.decode(token, verify=False, algorithms=['RS256'], options={"verify_signature": False})
     return payload.get("account")
 
 

ciocore/docsite/apidoc/api_client/index.html

@@ -2227,7 +2227,7 @@ prompt the user to log in. </p>
     <span class="k">if</span> <span class="ow">not</span> <span class="n">token</span><span class="p">:</span>
         <span class="k">return</span> <span class="kc">False</span>
 
-    <span class="n">decoded</span> <span class="o">=</span> <span class="n">jwt</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="n">creds</span><span class="p">[</span><span class="s2">&quot;access_token&quot;</span><span class="p">],</span> <span class="n">verify</span><span class="o">=</span><span class="kc">False</span><span class="p">)</span>
+    <span class="n">decoded</span> <span class="o">=</span> <span class="n">jwt</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="n">creds</span><span class="p">[</span><span class="s2">&quot;access_token&quot;</span><span class="p">],</span> <span class="n">verify</span><span class="o">=</span><span class="kc">False</span><span class="p">,</span> <span class="n">algorithms</span><span class="o">=</span><span class="p">[</span><span class="s1">&#39;RS256&#39;</span><span class="p">],</span> <span class="n">options</span><span class="o">=</span><span class="p">{</span><span class="s2">&quot;verify_signature&quot;</span><span class="p">:</span> <span class="kc">False</span><span class="p">})</span>
     <span class="n">audience_domain</span> <span class="o">=</span> <span class="n">decoded</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="s2">&quot;aud&quot;</span><span class="p">)</span>
     <span class="k">return</span> <span class="p">(</span>
         <span class="n">audience_domain</span>
@@ -2301,7 +2301,7 @@ prompt the user to log in. </p>
 <span class="sd">    Returns:</span>
 <span class="sd">        str: The account id.</span>
 <span class="sd">    &quot;&quot;&quot;</span>
-    <span class="n">payload</span> <span class="o">=</span> <span class="n">jwt</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="n">token</span><span class="p">,</span> <span class="n">verify</span><span class="o">=</span><span class="kc">False</span><span class="p">)</span>
+    <span class="n">payload</span> <span class="o">=</span> <span class="n">jwt</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="n">token</span><span class="p">,</span> <span class="n">verify</span><span class="o">=</span><span class="kc">False</span><span class="p">,</span> <span class="n">algorithms</span><span class="o">=</span><span class="p">[</span><span class="s1">&#39;RS256&#39;</span><span class="p">],</span> <span class="n">options</span><span class="o">=</span><span class="p">{</span><span class="s2">&quot;verify_signature&quot;</span><span class="p">:</span> <span class="kc">False</span><span class="p">})</span>
     <span class="k">return</span> <span class="n">payload</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="s2">&quot;account&quot;</span><span class="p">)</span>
 </code></pre></div>
         </details>