Remove dependency on jwcrypto
and cryptography
#617
Labels
security
Changes to improve or maintain the availability and resilience of the app
Milestone
This task is to make the code changes necessary for removing
jwcrypto
from ourrequirements.txt
file. (cryptography
is a transitive dependency ofjwcrypto
, so we can remove that as well.) Some of our Django models currently returnjwk.JWK
instances in some of their methods.Acceptance Criteria
requirements.txt
file does not containjwcrypto
or any of its dependenciesAdditional context
#141 mentions that a goal is to consolidate dependency management, which means
benefits
should not be directly depending on packages that are only needed for the Eligibility API. #596 pulls out most of the usage ofjwcrypto
, except for the ones left incore/models.py
andtests/pytests/eligibility/test_views.py
.The text was updated successfully, but these errors were encountered: