pargo-auth 0.1.4__tar.gz → 0.1.5__tar.gz

{pargo_auth-0.1.4 → pargo_auth-0.1.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pargo-auth
-Version: 0.1.4
+Version: 0.1.5
 Summary: Shared authentication middleware for PARGO backend services
 Project-URL: Homepage, https://github.com/pargoorg/pargo-auth
 Project-URL: Repository, https://github.com/pargoorg/pargo-auth

{pargo_auth-0.1.4 → pargo_auth-0.1.5}/src/pargo_auth/__init__.py

@@ -1,6 +1,6 @@
 """PARGO Auth - Shared authentication middleware for PARGO backend services."""
 
-__version__ = "0.1.4"
+__version__ = "0.1.5"
 
 from .middleware import SupabaseAuth, get_current_user, require_auth
 from .models import AuthenticatedUser

{pargo_auth-0.1.4 → pargo_auth-0.1.5}/src/pargo_auth/middleware.py

@@ -81,11 +81,11 @@ class SupabaseAuth:
             jwks_client = self._get_jwks_client()
             signing_key = jwks_client.get_signing_key_from_jwt(token)
             
-            # Decode and verify
+            # Decode and verify (support both RS256 and ES256 - Supabase uses ES256)
             payload = jwt.decode(
                 token,
                 signing_key.key,
-                algorithms=["RS256"],
+                algorithms=["ES256", "RS256"],
                 issuer=self.issuer,
                 options={
                     "verify_aud": False,  # Supabase doesn't always set aud