pyjwt[crypto] 2.0.0 更新与 django-allauth 不兼容

Question

我有一个使用 django-allauth 0.44.0. 的项目 昨天 (12/22/20) pyjwt 将您的版本更新为 2.0.0. 当我尝试安装运行 pip 的依赖项时，返回这个错误信息，使用docker-compose:

Collecting pyjwt[crypto]>=1.7
ERROR: In --require-hashes mode, all requirements must have their versions pinned with ==. These do not:
pyjwt[crypto]>=1.7 from https://files.pythonhosted.org/packages/91/5f/5cff1c3696e0d574f5741396550c9a308dde40704d17e39e94b89c07d789/PyJWT-2.0.0-py3-none-any.whl#sha256=5c.... (from django-allauth==0.44.0->-r requirements-dev.txt (line 125))
ERROR: Service 'web' failed to build: The command '/bin/sh -c pip install -r requirements-dev.txt' returned a non-zero code: 1

在 Poetry.lock 中：

[[package]]
name = "django-allauth"
version = "0.44.0"
description = "Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication."
category = "main"
optional = false
python-versions = "*"

[package.dependencies]
Django = ">=2.0"
pyjwt = {version = ">=1.7", extras = ["crypto"]}
python3-openid = ">=3.0.8"
requests = "*"
requests-oauthlib = ">=0.3.0"

[[package]]
name = "pyjwt"
version = "1.7.1"
description = "JSON Web Token implementation in Python"
category = "main"
optional = false
python-versions = "*"

有人有同样的问题吗？谢谢

Answer 1

我遇到了同样的问题，只需安装更高版本的 all-auth ( pip install django-allauth==0.31.0 ) 并出错。