-
-
Notifications
You must be signed in to change notification settings - Fork 739
Closed
Labels
Description
In cryptography 42.x.x, this library introduces a new parsing validation that raises a ValueError when load_pem_public_key is called with an invalid PEM. This affects the JWS decode function, as PyJWT does not currently handle this exception. Does it make sense to address this scenario?
PyJWT unmanaged exception point:
Line 346 in 1242020
| return cast(RSAPublicKey, load_pem_public_key(key_bytes)) |
cryptography new validation: https://github.com/pyca/cryptography/blob/b507701ab4c14c345fd036c20ec7b95dae78c1a4/src/rust/src/error.rs#L12
Thank you.
Reactions are currently unavailable