Issues signing string on Python 3 about itsdangerous HOT 6 CLOSED

You need to make sure the string you send to the sign method is a bytes array and you get a byte-array back.

Try this:

from itsdangerous import Signer
s = Signer('AAAAAAAAAAAAAAAAAAAA')
s.sign('[email protected]'.encode()).decode()

$ python
Python 3.6.3 (default, Oct  9 2017, 12:11:29) 
[GCC 7.2.1 20170915 (Red Hat 7.2.1-2)] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> from itsdangerous import Signer
>>> s = Signer('AAAAAAAAAAAAAAAAAAAA')
>>> s.sign('[email protected]'.encode()).decode()
'[email protected]'

from itsdangerous.

Seems like this is fixed in the repo but not on the itsdangerous version in PyPI. Any way we can get a new version or is there a workaround?

from itsdangerous.

Seems like the TimedSerializer does not suffer from this issue so I suppose that is the workaround.

from itsdangerous.

➜  ~ pip3 list | grep danger -i
itsdangerous (0.24)
➜  ~ pip3 install -U itsdangerous
Requirement already up-to-date: itsdangerous in /usr/local/lib/python3.6/site-packages
➜  ~

I found the log return value + want_bytes(self.sep) + self.get_signature(value) is not the current version code. My version is 0.24.
So I upgraded, pip3 install -U itsdangerous, but failed with ** already up-to-date**.

Pretty bad. Go to sleep.

from itsdangerous.

@BlackVoid interestingly though, it says "must be str" rather than "must be bytes" ?

from itsdangerous.

This will be fixed in the next release.

from itsdangerous.