-
-
Notifications
You must be signed in to change notification settings - Fork 7.4k
Python-Jose abandoned - use authlib or other instead? #1188
-
First Check
- I added a very descriptive title here.
- I used the GitHub search to find a similar question and didn't find it.
- I searched in the documentation/README.
- I already searched in Google "How to do X" and didn't find any information.
- I already read and followed all the tutorial in the docs/README and didn't find an answer.
Commit to Help
- I commit to help with one of those options 👆
Example Code
No example needed
Description
First of all, thank you for all your hard work on FastApi and this template!
I just wanted to raise the discussion here that can also be found over on the FastApi repo, which concerns the usage of Python-Jose: fastapi/fastapi#9587
TLDR: it seems that Python-Jose has been abandoned for a while, and now CVEs have been popping up surrounding it and its dependencies. Yet, it is still used in this template and suggested in the official FastApi documentation. Some people are reporting that it doesn't work at all in Python 3.11, although I personally haven't encountered that issue.
Would it maybe be appropriate to replace the Jose dependency in this project with authlib or something else? This project, being a template, should probably be as future proof as possible.
Operating System
Windows
Operating System Details
Not relevant to topic
Python Version
3.11.9
Additional Context
No response
Beta Was this translation helpful? Give feedback.
All reactions
already fixed and merged
#1203
Replies: 2 comments
-
already fixed and merged
#1203
Beta Was this translation helpful? Give feedback.
All reactions
-
what is the recommended library to use today for authentication with fastapi?
Beta Was this translation helpful? Give feedback.