From 486efa9aba1e07c1fcc495f39fa135ad674fefd5 Mon Sep 17 00:00:00 2001
From: Paulus Schoutsen <paulus@paulusschoutsen.nl>
Date: Tue, 14 Aug 2018 22:02:01 +0200
Subject: [PATCH] Pin crypto (#15978)

* Pin crypto

* Fix PyJWT import once
---
 homeassistant/components/notify/html5.py | 2 +-
 homeassistant/package_constraints.txt    | 1 +
 requirements_all.txt                     | 4 +---
 requirements_test_all.txt                | 3 ---
 setup.py                                 | 2 ++
 5 files changed, 5 insertions(+), 7 deletions(-)

diff --git a/homeassistant/components/notify/html5.py b/homeassistant/components/notify/html5.py
index e280aa67e40a4..1ed5047200419 100644
--- a/homeassistant/components/notify/html5.py
+++ b/homeassistant/components/notify/html5.py
@@ -26,7 +26,7 @@
 from homeassistant.helpers import config_validation as cv
 from homeassistant.util import ensure_unique_string
 
-REQUIREMENTS = ['pywebpush==1.6.0', 'PyJWT==1.6.0']
+REQUIREMENTS = ['pywebpush==1.6.0']
 
 DEPENDENCIES = ['frontend']
 
diff --git a/homeassistant/package_constraints.txt b/homeassistant/package_constraints.txt
index 3aa1e3643c6fa..26628d7fe6255 100644
--- a/homeassistant/package_constraints.txt
+++ b/homeassistant/package_constraints.txt
@@ -5,6 +5,7 @@ attrs==18.1.0
 certifi>=2018.04.16
 jinja2>=2.10
 PyJWT==1.6.4
+cryptography==2.3.1
 pip>=8.0.3
 pytz>=2018.04
 pyyaml>=3.13,<4
diff --git a/requirements_all.txt b/requirements_all.txt
index cf64fde7c64f0..4736e4e4c6d11 100644
--- a/requirements_all.txt
+++ b/requirements_all.txt
@@ -6,6 +6,7 @@ attrs==18.1.0
 certifi>=2018.04.16
 jinja2>=2.10
 PyJWT==1.6.4
+cryptography==2.3.1
 pip>=8.0.3
 pytz>=2018.04
 pyyaml>=3.13,<4
@@ -39,9 +40,6 @@ Mastodon.py==1.3.1
 # homeassistant.components.isy994
 PyISY==1.1.0
 
-# homeassistant.components.notify.html5
-PyJWT==1.6.0
-
 # homeassistant.components.sensor.mvglive
 PyMVGLive==1.1.4
 
diff --git a/requirements_test_all.txt b/requirements_test_all.txt
index ffc55c2321023..4115fcfcb3f03 100644
--- a/requirements_test_all.txt
+++ b/requirements_test_all.txt
@@ -21,9 +21,6 @@ requests_mock==1.5.2
 # homeassistant.components.homekit
 HAP-python==2.2.2
 
-# homeassistant.components.notify.html5
-PyJWT==1.6.0
-
 # homeassistant.components.sensor.rmvtransport
 PyRMVtransport==0.0.7
 
diff --git a/setup.py b/setup.py
index bd1e70aa8ae6f..7484dc286e62e 100755
--- a/setup.py
+++ b/setup.py
@@ -39,6 +39,8 @@
     'certifi>=2018.04.16',
     'jinja2>=2.10',
     'PyJWT==1.6.4',
+    # PyJWT has loose dependency. We want the latest one.
+    'cryptography==2.3.1',
     'pip>=8.0.3',
     'pytz>=2018.04',
     'pyyaml>=3.13,<4',