Remove the jwcrypto library and comment out its usage

We will remove it completely when we remove the openid auth functionality from the phone e-mission/e-mission-docs#680 (comment)
shankari · Oct 18, 2022 · 47ca92c · 47ca92c
1 parent 64cb837
commit 47ca92c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/emission/net/auth/openid_auth.py b/emission/net/auth/openid_auth.py
@@ -9,7 +9,9 @@
 import urllib.request, urllib.parse, urllib.error, json
 import json
 import logging
-from jwcrypto import jwt, jwk
+# Disable this due to https://security.snyk.io/vuln/SNYK-PYTHON-JWCRYPTO-3030035
+# We should consider removing this completely when we remove the openid option from the app as well
+# from jwcrypto import jwt, jwk
 
 
 class OpenIDAuthMethod(object):

diff --git a/setup/environment36.yml b/setup/environment36.yml
@@ -20,7 +20,6 @@ dependencies:
 - scipy=1.5.2
 - utm=0.5.0
 - pip:
-  - jwcrypto==0.7
   - pyfcm==1.4.7
   - pygeocoder==1.2.5
   - pymongo==3.11.0