pyjwt

PyJWT 2.10+ added InsecureKeyLengthWarning in jwt/api_jwt.py that fires when the HMAC key used with HS256 is shorter than 32 bytes (256-bit hash output), per RFC 7518 Section 3.2. The check is byte-le...