Replace pyjwkest

[iamsobanjaved]

The pyjwkest package was abandoned upstream more than 3 years ago. Let's replace it with something more actively maintained. First, check to see if the latest version of PyJWT (already used here) supports what we need from pyjwkest. If not, replace it with cryptojwt as it is from the same author and actively maintained. Also, this package has a similar interface to the one which is being replaced.

Tasks

Preview Give feedback

No tasks being tracked yet.

[timmc-edx]

It looks like https://github.com/openedx/xblock-lti-consumer and https://github.com/edx/token-utils include it as well. I'm talking with the owners of edx-token-utils about switching over, and making sure their public and private keys are ready for the change.

For reference, these are the two config-related issues that need to be addressed for each deployer:

• "Incorrect padding" errors in some IDAs with version 8.8.0 openedx/edx-drf-extensions#346 - whitespace in Base64
• Update LMS private key JWKs to prepare for pyjwkest removal #261 - private key optional params

[jristau1984]

@iamsobanjaved can you review and comment if this is still a valid issue to keep alive? If so, should it be in the Arch- or Arbi-BOM board?

[iamsobanjaved]

I created this issue to track it across multiple repos. It is currently pending in 2 repos; I will add those in tasklist. We will be picking up on pending repos this quarter.

[UsamaSadiq]

Waiting for the owning team testing on this issue. Tracking testing in the issue https://2u-internal.atlassian.net/browse/COSMO-537.