Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update requirements to allow for latest cryptography updates #636

Open
5 tasks done
station70-jason opened this issue Jan 6, 2025 · 0 comments
Open
5 tasks done
Labels
feature request A feature has been asked for or suggested by the community

Comments

@station70-jason
Copy link

Checklist

  • I have looked into the Readme and Examples, and have not found a suitable solution or answer.
  • I have looked into the API documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Describe the problem you'd like to have solved

cryptography has released updates as of 2024-11-27 that are incompatible with the current requirements of auth0-python. I'd like to keep up to date with cryptography patches. As mentioned in previous issues, this can become a compliance issue if CVEs are issued.

Describe the ideal solution

Remove upper bounds on cryptography requirement.

This appears to be a recurring issue, cf. this issue from the past: #627
proposed fix, removing upper bounds, was provided in PR #628
but was just slightly updated in #630

Alternatives and current workarounds

No response

Additional context

No response

@station70-jason station70-jason added the feature request A feature has been asked for or suggested by the community label Jan 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request A feature has been asked for or suggested by the community
Projects
None yet
Development

No branches or pull requests

1 participant