Merge pull request #86 from jschlyter/warn_rsa1_5

deprecate alg=RSA1_5

Author: jschlyter

src/cryptojwt/jwe/__init__.py

@@ -32,6 +32,11 @@
     ],
 }
 
+DEPRECATED = {
+    "alg": ["RSA1_5"],
+    "enc": [],
+}
+
 
 class Encrypter(object):
     """Abstract base class for encryption algorithms."""

src/cryptojwt/jwx.py

@@ -1,13 +1,15 @@
 """A basic class on which to build the JWS and JWE classes."""
 import json
 import logging
+import warnings
 
 import requests
 
 from cryptojwt.jwk import JWK
 from cryptojwt.key_bundle import KeyBundle
 
 from .exception import HeaderError
+from .jwe import DEPRECATED
 from .jwk.jwk import key_from_jwk_dict
 from .jwk.rsa import RSAKey
 from .jwk.rsa import import_rsa_key
@@ -91,6 +93,8 @@ def __init__(self, msg=None, with_digest=False, httpc=None, **kwargs):
                         raise ValueError("x5u")
                 else:
                     self._dict[key] = _val
+                if key in DEPRECATED and _val in DEPRECATED[key]:
+                    warnings.warn(f"{key}={_val} deprecated")
 
     def _set_jwk(self, val):
         if isinstance(val, dict):