1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
|
Changelog
=========
2.2.0 (2025-10-14)
------------------
* Support for Python 3.9 has been deprecated and will be removed in the next
scheduled release.
2.1.0 (2025-07-08)
------------
* Added support for Python 3.14.
* Dropped support for Python 3.9.0 and 3.9.1 for compatibility with newer
versions of the cryptography Python package. Python 3.9.2+ is still
supported.
2.0.0 (2025-02-10)
------------------
* Breaking Change: PyOpenSSL has been fully removed.
- Dropped objects:
`josepy.util.ComparableX509`
- Functions now expect `cryptography.x509` objects:
`josepy.json_util.encode_cert`
`josepy.json_util.encode_csr`
`josepy.jws.Header.x5c.encoder`
- Functions now return `cryptography.x509` objects:
`josepy.json_util.decode_cert`
`josepy.json_util.decode_csr`
`josepy.jws.Header.x5c.decoder`
* Dropped support for Python 3.8.
1.15.0 (2025-01-22)
-------------------
* Added a deprecation warning about future backwards incompatible changes. The
text of that warning is "The next major version of josepy will remove
josepy.util.ComparableX509 and all uses of it as part of removing our
dependency on PyOpenSSL. This includes modifying any functions with
ComparableX509 parameters or return values. This will be a breaking change.
To avoid breakage, we recommend pinning josepy < 2.0.0 until josepy 2.0.0 is
out and you've had time to update your code."
* Added support for Python 3.13.
* Dropped support for Python 3.7.
* Support for Python 3.8 has been deprecated and will be removed in the next
scheduled release.
1.14.0 (2023-11-01)
-------------------
* Added support for Python 3.11 and 3.12.
* Support for Python 3.7 has been deprecated and will be removed in the next
scheduled release.
* Dropped support for Python 3.6.
* Added a new valid PGP key for signing our PyPI packages with the fingerprint
F2871B4152AE13C49519111F447BF683AA3B26C3
1.13.0 (2022-03-10)
-------------------
* Support for Python 3.6 has been deprecated and will be removed in the next
scheduled release.
* Corrected some type annotations.
1.12.0 (2022-01-11)
-------------------
* Corrected some type annotations.
* Dropped support for cryptography<1.5.
* Added the top level attributes josepy.JWKEC, josepy.JWKOct, and
josepy.ComparableECKey for convenience and consistency.
1.11.0 (2021-11-17)
-------------------
* Added support for Python 3.10.
* We changed the PGP key used to sign the packages we upload to PyPI. Going
forward, releases will be signed with one of three different keys. All of
these keys are available on major key servers and signed by our previous PGP
key. The fingerprints of these new keys are:
- BF6BCFC89E90747B9A680FD7B6029E8500F7DB16
- 86379B4F0AF371B50CD9E5FF3402831161D1D280
- 20F201346BF8F3F455A73F9A780CC99432A28621
1.10.0 (2021-09-27)
-------------------
* josepy is now compliant with PEP-561: type checkers will fetch types from the inline
types annotations when josepy is installed as a dependency in a Python project.
* Added a `field` function to assist in adding type annotations for Fields in classes.
If the field function is used to define a `Field` in a `JSONObjectWithFields` based
class without a type annotation, an error will be raised.
* josepy's tests can no longer be imported under the name josepy, however, they are still
included in the package and you can run them by installing josepy with "tests" extras and
running `python -m pytest`.
1.9.0 (2021-09-09)
------------------
* Removed pytest-cache testing dependency.
* Fixed a bug that sometimes caused incorrect padding to be used when
serializing Elliptic Curve keys as JSON Web Keys.
1.8.0 (2021-03-15)
------------------
* Removed external mock dependency.
* Removed dependency on six.
* Deprecated the module josepy.magic_typing.
* Fix JWS/JWK generation with EC keys when keys or signatures have leading zeros.
1.7.0 (2021-02-11)
------------------
* Dropped support for Python 2.7.
* Added support for EC keys.
1.6.0 (2021-01-26)
------------------
* Deprecated support for Python 2.7.
1.5.0 (2020-11-03)
------------------
* Added support for Python 3.9.
* Dropped support for Python 3.5.
* Stopped supporting running tests with ``python setup.py test`` which is
deprecated in favor of ``python -m pytest``.
1.4.0 (2020-08-17)
------------------
* Deprecated support for Python 3.5.
1.3.0 (2020-01-28)
------------------
* Deprecated support for Python 3.4.
* Officially add support for Python 3.8.
1.2.0 (2019-06-28)
------------------
* Support for Python 2.6 and 3.3 has been removed.
* Known incompatibilities with Python 3.8 have been resolved.
1.1.0 (2018-04-13)
------------------
* Deprecated support for Python 2.6 and 3.3.
* Use the ``sign`` and ``verify`` methods when they are available in
``cryptography`` instead of the deprecated methods ``signer`` and
``verifier``.
1.0.1 (2017-10-25)
------------------
Stop installing mock as part of the default but only as part of the
testing dependencies.
1.0.0 (2017-10-13)
-------------------
First release after moving the josepy package into a standalone library.
|
