zulip/zproject
Anders Kaseorg 8e4f22c184 auth: Require algorithms setting for JWT auth.
Calling jwt.decode without an algorithms list raises a
DeprecationWarning.  This is for protecting against
symmetric/asymmetric key confusion attacks.

This is a backwards-incompatible configuration change.

Fixes #15207.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
2020-06-08 16:22:25 -07:00
..
jinja2 static: Serve webpack bundles from the root domain. 2020-04-10 00:48:02 -07:00
__init__.py
backends.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
config.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
default_settings.py auth: Require algorithms setting for JWT auth. 2020-06-08 16:22:25 -07:00
dev_settings.py settings: Support free_trial_days in the development environment. 2020-05-26 21:31:07 -07:00
dev_urls.py static: Serve webpack bundles from the root domain. 2020-04-10 00:48:02 -07:00
email_backends.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
legacy_urls.py urls: Migrate legacy urls to use modern django pattern. 2020-05-07 16:33:03 -07:00
prod_settings_template.py compose: Rewrite Zoom video call integration to use OAuth. 2020-06-03 16:39:12 -07:00
settings.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
slack_importer_test_settings.py settings: Migrate test settings to modern postgres backend name. 2019-01-23 17:08:24 -08:00
terms.md.template Add TERMS_OF_SERVICE setting. 2016-07-29 20:47:31 -07:00
test_settings.py compose: Rewrite Zoom video call integration to use OAuth. 2020-06-03 16:39:12 -07:00
urls.py python: Convert "".format to Python 3.6 f-strings. 2020-06-08 15:31:20 -07:00
wsgi.py setup_path_on_import: Replace with setup_path function. 2020-02-25 15:40:21 -08:00