Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The latest version of PyJWT is not backward compatible with older versions in certain cases #1028

Open
shuhaib-aot opened this issue Dec 13, 2024 · 1 comment

Comments

@shuhaib-aot
Copy link
Contributor

The latest version of PyJWT is not backward compatible with older versions in certain cases. For example, if one application is generating tokens using PyJWT version 2.9.0 and includes the jti claim as a number, another application using the latest PyJWT version will encounter an error when attempting to decode these tokens. This is due to stricter validation in the newer version, which expects jti to be a string.

This lack of compatibility could cause issues in production environments where different services rely on different PyJWT versions. It would be helpful to provide a compatibility mode or clear documentation on handling such cases to ensure seamless integration across applications.

image

@ohshazbot
Copy link

Dupe of #1017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants