actions/pypi-publish
1
0
Fork 0
mirror of https://github.com/pypa/gh-action-pypi-publish.git synced 2024-11-25 18:10:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge PR #177 into unstable/v1

Browse source
This commit is contained in:
Sviatoslav Sydorenko 2023-08-10 22:58:37 +02:00
commit b7f401de30
No known key found for this signature in database
GPG key ID: 9345E8FEA89CA455
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
oidc-exchange.py
View file

@ -144,6 +144,9 @@ def assert_successful_audience_call(resp: requests.Response, domain: str):
def render_claims(token: str) -> str: def render_claims(token: str) -> str:
_, payload, _ = token.split(".", 2) _, payload, _ = token.split(".", 2)
# urlsafe_b64decode needs padding; JWT payloads don't contain any.
payload += "=" * (4 - (len(payload) % 4))
claims = json.loads(base64.urlsafe_b64decode(payload)) claims = json.loads(base64.urlsafe_b64decode(payload))
def _get(name: str) -> str: # noqa: WPS430 def _get(name: str) -> str: # noqa: WPS430
@ -207,7 +210,8 @@ if not mint_token_resp.ok:
die( die(
_SERVER_REFUSED_TOKEN_EXCHANGE_MESSAGE.format( _SERVER_REFUSED_TOKEN_EXCHANGE_MESSAGE.format(
reasons=reasons, rendered_claims=rendered_claims, reasons=reasons,
rendered_claims=rendered_claims,
), ),
) )