diff --git a/emission/net/auth/openid_auth.py b/emission/net/auth/openid_auth.py index dd48a80d8..8ca7b7719 100644 --- a/emission/net/auth/openid_auth.py +++ b/emission/net/auth/openid_auth.py @@ -9,7 +9,9 @@ import urllib.request, urllib.parse, urllib.error, json import json import logging -from jwcrypto import jwt, jwk +# Disable this due to https://security.snyk.io/vuln/SNYK-PYTHON-JWCRYPTO-3030035 +# We should consider removing this completely when we remove the openid option from the app as well +# from jwcrypto import jwt, jwk class OpenIDAuthMethod(object): diff --git a/setup/environment36.yml b/setup/environment36.yml index 53017daa6..57c61460b 100644 --- a/setup/environment36.yml +++ b/setup/environment36.yml @@ -20,7 +20,6 @@ dependencies: - scipy=1.5.2 - utm=0.5.0 - pip: - - jwcrypto==0.7 - pyfcm==1.4.7 - pygeocoder==1.2.5 - pymongo==3.11.0