latch-asgi 1.0.4__py3-none-any.whl → 1.0.5__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
latch_asgi/auth.py CHANGED
@@ -147,15 +147,15 @@ def get_signer_sub(auth_header: str) -> Authorization:
147
147
  # ) from e
148
148
 
149
149
  with app_tracer.start_as_current_span("decode jwt"):
150
+ audience = config.audience if jwt_key != config.self_signed_jwk else None
150
151
  try:
151
152
  jwt_data: dict[str, str] = jwt.decode(
152
153
  oauth_token,
153
154
  key=jwt_key,
154
155
  algorithms=["RS256", "HS256"],
155
156
  # fixme(maximsmol): gut this abomination
156
- audience=(
157
- config.audience if jwt_key != config.self_signed_jwk else None
158
- ),
157
+ audience=audience,
158
+ options={"verify_aud": audience is not None},
159
159
  )
160
160
  except jwt.exceptions.InvalidTokenError as e:
161
161
  # todo(maximsmol): filter out scope failures and include the correct error code
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: latch-asgi
3
- Version: 1.0.4
3
+ Version: 1.0.5
4
4
  Summary: ASGI python server
5
5
  Author-Email: Max Smolin <max@latch.bio>
6
6
  License: CC0-1.0
@@ -1,9 +1,9 @@
1
- latch_asgi-1.0.4.dist-info/METADATA,sha256=7XI3-sIgJ8P4MKSMl_QT5eFhhoBMD4zDNZTBRsQqTsk,580
2
- latch_asgi-1.0.4.dist-info/WHEEL,sha256=SOP-4bEE0jbVaCHQGVvF08uWxk5rcSsfEybvoQVHlD8,90
3
- latch_asgi-1.0.4.dist-info/licenses/COPYING,sha256=ogEPNDSH0_dhiv_lT3ifVIdgIzHAqNA_SemnxUfPBJk,7048
1
+ latch_asgi-1.0.5.dist-info/METADATA,sha256=Wz5SVOiGMcicoehOQQxWNPZ4q--nu_s7Z6JYo8Ak7x4,580
2
+ latch_asgi-1.0.5.dist-info/WHEEL,sha256=rSwsxJWe3vzyR5HCwjWXQruDgschpei4h_giTm0dJVE,90
3
+ latch_asgi-1.0.5.dist-info/licenses/COPYING,sha256=ogEPNDSH0_dhiv_lT3ifVIdgIzHAqNA_SemnxUfPBJk,7048
4
4
  latch_asgi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
5
5
  latch_asgi/asgi_iface.py,sha256=JSmp9YnbcU7MymDcqo7DvIGGyP5wZWe-8QNtAtkgJnc,2199
6
- latch_asgi/auth.py,sha256=wbsdN7n9eDZBvuiPp7_Z4t_kdDeFvGGeSEZn8VKoCUI,5824
6
+ latch_asgi/auth.py,sha256=XG4lfgpiu88bAcXa_brGeadDn6BlQH8f_swKwv7Jqag,5874
7
7
  latch_asgi/config.py,sha256=Tt3fj4sOz6TENfSIWI5_1fZM1aomIu9xQk4kfw4xDXA,276
8
8
  latch_asgi/context/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
9
9
  latch_asgi/context/common.py,sha256=8Mc1kaQoD0JUAkxD9URFOK4SFE8deJgJ1CroytbuV_Y,2654
@@ -16,4 +16,4 @@ latch_asgi/framework/http.py,sha256=mAZJrsYUPyh3PHt-IL3AEc4bNG1z3Sq8a7mA4o3fPZ0,
16
16
  latch_asgi/framework/websocket.py,sha256=KaRiGGXb635R0U3m_dm9nIT5iWYEWel1IH000MHN3t0,8017
17
17
  latch_asgi/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
18
18
  latch_asgi/server.py,sha256=Gg1ZUm7LCRgYXUjyIDn6TuZTXSGYk1jUM20ZWC-fseY,18418
19
- latch_asgi-1.0.4.dist-info/RECORD,,
19
+ latch_asgi-1.0.5.dist-info/RECORD,,
@@ -1,4 +1,4 @@
1
1
  Wheel-Version: 1.0
2
- Generator: pdm-backend (2.3.1)
2
+ Generator: pdm-backend (2.3.3)
3
3
  Root-Is-Purelib: true
4
4
  Tag: py3-none-any