Python-Jose abandoned - use authlib or other instead? #1188
-
First Check
Commit to Help
Example Code
DescriptionFirst of all, thank you for all your hard work on FastApi and this template! I just wanted to raise the discussion here that can also be found over on the FastApi repo, which concerns the usage of Python-Jose: fastapi/fastapi#9587 TLDR: it seems that Python-Jose has been abandoned for a while, and now CVEs have been popping up surrounding it and its dependencies. Yet, it is still used in this template and suggested in the official FastApi documentation. Some people are reporting that it doesn't work at all in Python 3.11, although I personally haven't encountered that issue. Would it maybe be appropriate to replace the Jose dependency in this project with authlib or something else? This project, being a template, should probably be as future proof as possible. Operating SystemWindows Operating System DetailsNot relevant to topic Python Version3.11.9 Additional ContextNo response |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
already fixed and merged |
Beta Was this translation helpful? Give feedback.
-
what is the recommended library to use today for authentication with fastapi? |
Beta Was this translation helpful? Give feedback.
already fixed and merged
#1203