Conversation
|
@russell-lewis BTW, dependency conflict problems are very common in practice in python ecosystem. |
|
This saves the day, the master branch is not working for me at the moment |
… hash * Pin marshmellow to a version less than 3. This might be fixed in Netflix#99 * Disable at_hash verification if present in the JWT, since the bless lambda doesn't have access to the a hash of the access token.
|
Is it possible to merge this? Master is not working otherwise. |
|
A workaround for this is |
|
I don't know if this project is still relevant/maintained but I wanted to tell you a little story about this guy that watched ~1hr video on youtube about how awesome Bless is, plus ~2hr wrapping his head around the idea of Certificate Authorities, because at this point he was oblivious about them, all he knows was private/public keys. Did I mention this guy doesn't have any background in Python? Anyways he continued removing blocker after blocker, almost there he thought then finally after deploying the solution ... he founds it's not working, Master branch is broken! You know where this is going right? Awesome project guys but the main function is broken and if I understand correctly the solution is right there on a PR from last year, so yeah what's up with that? |
|
Install and builds were against pinned versions, which is why travis is still happy. See https://github.com/Netflix/bless#installation-instructions I've given the list an update, but I've got to archive this project. |
#98 keep the consistency between setup.py and requirements.txt