SciTokens provide a token format for distributed authorization. The tokens are
self-describing, can be verified in a distributed fashion (no need to contact
the issuer to determine if the token is valid). This is convenient for a
federated environment where several otherwise-independent storage endpoints
want to delegate trust for an issuer for managing a storage allocation.
Provides
Requires
License
Apache-2.0
Changelog
* Thu Apr 02 2026 Markéta Machová <mmachova@suse.com>
- CVE-2026-32714: usage of str.format() to construct SQL queries
can lead to SQL Injection (bsc#1261203)
* CVE-2026-32714.patch
- CVE-2026-32716: incorrectly validates scope paths can allow
access sibling paths (bsc#1261202)
* CVE-2026-32716.patch
- CVE-2026-32727: normalizing path before check can lead to path
traversal (bsc#1261201)
* CVE-2026-32727.patch
* Thu Oct 10 2024 Steve Kowalik <steven.kowalik@suse.com>
- Update to 1.8.1:
* Adding pytest integration to turn of networking tests
* Fix missing issuer problem in deserialize function
* Add a CL tool to verify SciTokens
* Fix issue in creating the cache file location
* Add convenience functions to issue demo tokens
* Adding python scitokens spec file changes for review
- Drop patch use-importlib-metadata.patch, included upstream.
- Switch to pyproject macros.
* Wed Apr 12 2023 Steve Kowalik <steven.kowalik@suse.com>
- Update to 1.7.4:
* Remove aud enforcement from deserialize function
* Reduce length of comment line
* Update minimum pyjwt
* Remove use of six
- Drop patch python-scitokens-no-six.patch, included upstream
- Add patch use-importlib-metadata.patch:
* Use importlib.metadata, rather than pkg_resources.
* Mon Nov 14 2022 pgajdos@suse.com
- added patches
fix https://github.com/scitokens/scitokens/issues/169
+ python-scitokens-no-six.patch
* Sat Oct 29 2022 Yogalakshmi Arunachalam <yarunachalam@suse.com>
- Update to version 1.7.2
* Documentation changes release.
* Sat Oct 29 2022 Yogalakshmi Arunachalam <yarunachalam@suse.com>
- Update to version 1.7.1
* Add license to metadata by @duncanmmacleod in #150
* Update badges in README by @duncanmmacleod in #152
* Miscellaneous documentation fixes by @duncanmmacleod in #155
* Update setup.py by @duncanmmacleod in #156
* Adding codacy github action by @djw8605 in #158
* Attempt to fix codacy in github actions by @djw8605 in #159
* Add pyproject.toml file for PEP 517 builds by @lpsinger in #162
* Install requires setuptools by @lpsinger in #163
* Thu Sep 01 2022 Steve Kowalik <steven.kowalik@suse.com>
- Do not use python_module for Requires.
* Sun May 01 2022 Atri Bhattacharya <badshah400@gmail.com>
- Update to version 1.7.0:
* Reference test files using relative paths
[gh#citokens/scitokens#128].
* Use shutil.move instead of os.rename
[gh#citokens/scitokens#136].
* Add error message for when SciToken.discover doesn't find a
token [gh#citokens/scitokens#138].
* SciToken.serialize: fix str/bytes mismatch
[gh#citokens/scitokens#137].
* Add rpmbuild github actions workflow
[gh#citokens/scitokens#134].
* Update the bogus url used in the tests
[gh#citokens/scitokens#140].
* Fix bug decoding a token with no audience
[gh#citokens/scitokens#141].
* Use unittest.mock to check UnableToCreateCache
[gh#citokens/scitokens#139].
* Add obsoletes for smoother Yum updates on EL7
[gh#citokens/scitokens#127].
* Update algorithm used to test UnsupportedKeyException
[gh#citokens/scitokens#142].
* Run test suite using pytest during rpmbuild
[gh#citokens/scitokens#135].
* Update pyjwt version in requirements.txt
[gh#citokens/scitokens#131].
* Typo fix in readme [gh#citokens/scitokens#144].
* Default cached public keys set to 4 days
[gh#citokens/scitokens#145].
* Fri Feb 04 2022 Christian Goll <cgoll@suse.com>
- initial commit of the python SciTokens interface
Files
/etc/alternatives/scitokens-admin-create-key
/etc/alternatives/scitokens-admin-create-token
/etc/alternatives/scitokens-verify-token
/usr/bin/scitokens-admin-create-key
/usr/bin/scitokens-admin-create-key-3.14
/usr/bin/scitokens-admin-create-token
/usr/bin/scitokens-admin-create-token-3.14
/usr/bin/scitokens-verify-token
/usr/bin/scitokens-verify-token-3.14
/usr/lib/python3.14/site-packages/scitokens
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/INSTALLER
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/METADATA
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/RECORD
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/REQUESTED
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/WHEEL
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/entry_points.txt
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/licenses
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/licenses/LICENSE
/usr/lib/python3.14/site-packages/scitokens-1.8.1.dist-info/top_level.txt
/usr/lib/python3.14/site-packages/scitokens/__init__.py
/usr/lib/python3.14/site-packages/scitokens/__pycache__
/usr/lib/python3.14/site-packages/scitokens/__pycache__/__init__.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/__pycache__/__init__.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/__pycache__/scitokens.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/__pycache__/scitokens.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/__pycache__/urltools.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/__pycache__/urltools.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/scitokens.py
/usr/lib/python3.14/site-packages/scitokens/tools
/usr/lib/python3.14/site-packages/scitokens/tools/__init__.py
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/__init__.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/__init__.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/admin_create_key.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/admin_create_key.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/admin_create_token.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/admin_create_token.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/verify_token.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/__pycache__/verify_token.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/tools/admin_create_key.py
/usr/lib/python3.14/site-packages/scitokens/tools/admin_create_token.py
/usr/lib/python3.14/site-packages/scitokens/tools/verify_token.py
/usr/lib/python3.14/site-packages/scitokens/urltools.py
/usr/lib/python3.14/site-packages/scitokens/utils
/usr/lib/python3.14/site-packages/scitokens/utils/__init__.py
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/__init__.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/__init__.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/config.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/config.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/demo.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/demo.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/errors.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/errors.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/keycache.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/keycache.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/scitokens_protect.cpython-314.opt-1.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/__pycache__/scitokens_protect.cpython-314.pyc
/usr/lib/python3.14/site-packages/scitokens/utils/config.py
/usr/lib/