From 39d33441bbc108c2d3bb1227775ad440942ac3ee Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Fri, 28 Apr 2023 15:42:56 -0700
Subject: [PATCH 01/13] Add `algorithm` property to `PyJWK`

---
 jwt/api_jwk.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/jwt/api_jwk.py b/jwt/api_jwk.py
index dd876f73..f9dc556f 100644
--- a/jwt/api_jwk.py
+++ b/jwt/api_jwk.py
@@ -52,6 +52,7 @@ def __init__(self, jwk_data: JWKDict, algorithm: str | None = None) -> None:
         if not has_crypto and algorithm in requires_cryptography:
             raise PyJWKError(f"{algorithm} requires 'cryptography' to be installed.")
 
+        self.algorithm = algorithm
         self.Algorithm = self._algorithms.get(algorithm)
 
         if not self.Algorithm:

From 2fdeaa6a81da040ada1811378bb2db790cff5a14 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Fri, 28 Apr 2023 15:48:16 -0700
Subject: [PATCH 02/13] Allow `PyJWK` as a key when decoding JWTs.

---
 jwt/api_jws.py | 7 +++++--
 jwt/api_jwt.py | 7 ++++---
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/jwt/api_jws.py b/jwt/api_jws.py
index fa6708cc..e5c68302 100644
--- a/jwt/api_jws.py
+++ b/jwt/api_jws.py
@@ -11,6 +11,7 @@
     has_crypto,
     requires_cryptography,
 )
+from .api_jwk import PyJWK
 from .exceptions import (
     DecodeError,
     InvalidAlgorithmError,
@@ -172,7 +173,7 @@ def encode(
     def decode_complete(
         self,
         jwt: str | bytes,
-        key: AllowedPublicKeys | str | bytes = "",
+        key: AllowedPublicKeys | PyJWK | str | bytes = "",
         algorithms: list[str] | None = None,
         options: dict[str, Any] | None = None,
         detached_payload: bytes | None = None,
@@ -190,6 +191,8 @@ def decode_complete(
         merged_options = {**self.options, **options}
         verify_signature = merged_options["verify_signature"]
 
+        if isinstance(key, PyJWK):
+            key = key.key
         if verify_signature and not algorithms:
             raise DecodeError(
                 'It is required that you pass in a value for the "algorithms" argument when calling decode().'
@@ -217,7 +220,7 @@ def decode_complete(
     def decode(
         self,
         jwt: str | bytes,
-        key: AllowedPublicKeys | str | bytes = "",
+        key: AllowedPublicKeys | PyJWK | str | bytes = "",
         algorithms: list[str] | None = None,
         options: dict[str, Any] | None = None,
         detached_payload: bytes | None = None,
diff --git a/jwt/api_jwt.py b/jwt/api_jwt.py
index 49d1b488..9c8614a2 100644
--- a/jwt/api_jwt.py
+++ b/jwt/api_jwt.py
@@ -7,7 +7,7 @@
 from datetime import datetime, timedelta, timezone
 from typing import TYPE_CHECKING, Any
 
-from . import api_jws
+from . import api_jws, api_jwk
 from .exceptions import (
     DecodeError,
     ExpiredSignatureError,
@@ -21,6 +21,7 @@
 
 if TYPE_CHECKING:
     from .algorithms import AllowedPrivateKeys, AllowedPublicKeys
+    from .api_jwk import PyJWK
 
 
 class PyJWT:
@@ -100,7 +101,7 @@ def _encode_payload(
     def decode_complete(
         self,
         jwt: str | bytes,
-        key: AllowedPublicKeys | str | bytes = "",
+        key: AllowedPublicKeys | PyJWK | str | bytes = "",
         algorithms: list[str] | None = None,
         options: dict[str, Any] | None = None,
         # deprecated arg, remove in pyjwt3
@@ -185,7 +186,7 @@ def _decode_payload(self, decoded: dict[str, Any]) -> Any:
     def decode(
         self,
         jwt: str | bytes,
-        key: AllowedPublicKeys | str | bytes = "",
+        key: AllowedPublicKeys | PyJWK | str | bytes = "",
         algorithms: list[str] | None = None,
         options: dict[str, Any] | None = None,
         # deprecated arg, remove in pyjwt3

From ac7db736d276adeb88c39bca03e33d0b7be0c6e5 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Fri, 28 Apr 2023 15:49:06 -0700
Subject: [PATCH 03/13] Use PyJWK algorithm by default when deocding JWTs.

---
 jwt/api_jws.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/jwt/api_jws.py b/jwt/api_jws.py
index e5c68302..b3e93621 100644
--- a/jwt/api_jws.py
+++ b/jwt/api_jws.py
@@ -192,7 +192,10 @@ def decode_complete(
         verify_signature = merged_options["verify_signature"]
 
         if isinstance(key, PyJWK):
+            if algorithms is None:
+                algorithms = [key.algorithm]
             key = key.key
+
         if verify_signature and not algorithms:
             raise DecodeError(
                 'It is required that you pass in a value for the "algorithms" argument when calling decode().'

From a4d6b3bc0889da8ce2712fdc490a57aa5ca8e6d6 Mon Sep 17 00:00:00 2001
From: "pre-commit-ci[bot]"
 <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Date: Fri, 28 Apr 2023 23:01:58 +0000
Subject: [PATCH 04/13] [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci
---
 jwt/api_jwt.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/jwt/api_jwt.py b/jwt/api_jwt.py
index 9c8614a2..ccfd6691 100644
--- a/jwt/api_jwt.py
+++ b/jwt/api_jwt.py
@@ -7,7 +7,7 @@
 from datetime import datetime, timedelta, timezone
 from typing import TYPE_CHECKING, Any
 
-from . import api_jws, api_jwk
+from . import api_jwk, api_jws
 from .exceptions import (
     DecodeError,
     ExpiredSignatureError,

From 05749d12d4d81b63101b61d2f98332bc2dd921f0 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 21:38:58 -0700
Subject: [PATCH 05/13] Rename `PyJWK.algorithm` to `PyJWK.algorithm_name`

---
 jwt/api_jwk.py | 2 +-
 jwt/api_jws.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/jwt/api_jwk.py b/jwt/api_jwk.py
index f9dc556f..f03170e0 100644
--- a/jwt/api_jwk.py
+++ b/jwt/api_jwk.py
@@ -52,7 +52,7 @@ def __init__(self, jwk_data: JWKDict, algorithm: str | None = None) -> None:
         if not has_crypto and algorithm in requires_cryptography:
             raise PyJWKError(f"{algorithm} requires 'cryptography' to be installed.")
 
-        self.algorithm = algorithm
+        self.algorithm_name = algorithm
         self.Algorithm = self._algorithms.get(algorithm)
 
         if not self.Algorithm:
diff --git a/jwt/api_jws.py b/jwt/api_jws.py
index b3e93621..a42bf611 100644
--- a/jwt/api_jws.py
+++ b/jwt/api_jws.py
@@ -193,7 +193,7 @@ def decode_complete(
 
         if isinstance(key, PyJWK):
             if algorithms is None:
-                algorithms = [key.algorithm]
+                algorithms = [key.algorithm_name]
             key = key.key
 
         if verify_signature and not algorithms:

From 745dd472a298949fb9d2d672efbb54bb32fd564f Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 21:43:13 -0700
Subject: [PATCH 06/13] Test `PyJWK.algorithm_name`

---
 tests/test_api_jwk.py | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/tests/test_api_jwk.py b/tests/test_api_jwk.py
index 4754db60..326e012a 100644
--- a/tests/test_api_jwk.py
+++ b/tests/test_api_jwk.py
@@ -65,6 +65,7 @@ def test_should_load_key_without_alg_from_dict(self):
         assert jwk.key_type == "RSA"
         assert isinstance(jwk.Algorithm, RSAAlgorithm)
         assert jwk.Algorithm.hash_alg == RSAAlgorithm.SHA256
+        assert jwk.algorithm_name == "RS256"
 
     @crypto_required
     def test_should_load_key_from_dict_with_algorithm(self):
@@ -76,6 +77,7 @@ def test_should_load_key_from_dict_with_algorithm(self):
         assert jwk.key_type == "RSA"
         assert isinstance(jwk.Algorithm, RSAAlgorithm)
         assert jwk.Algorithm.hash_alg == RSAAlgorithm.SHA256
+        assert jwk.algorithm_name == "RS256"
 
     @crypto_required
     def test_should_load_key_ec_p256_from_dict(self):
@@ -87,6 +89,7 @@ def test_should_load_key_ec_p256_from_dict(self):
         assert jwk.key_type == "EC"
         assert isinstance(jwk.Algorithm, ECAlgorithm)
         assert jwk.Algorithm.hash_alg == ECAlgorithm.SHA256
+        assert jwk.algorithm_name == "ES256"
 
     @crypto_required
     def test_should_load_key_ec_p384_from_dict(self):
@@ -98,6 +101,7 @@ def test_should_load_key_ec_p384_from_dict(self):
         assert jwk.key_type == "EC"
         assert isinstance(jwk.Algorithm, ECAlgorithm)
         assert jwk.Algorithm.hash_alg == ECAlgorithm.SHA384
+        assert jwk.algorithm_name == "ES384"
 
     @crypto_required
     def test_should_load_key_ec_p521_from_dict(self):
@@ -109,6 +113,7 @@ def test_should_load_key_ec_p521_from_dict(self):
         assert jwk.key_type == "EC"
         assert isinstance(jwk.Algorithm, ECAlgorithm)
         assert jwk.Algorithm.hash_alg == ECAlgorithm.SHA512
+        assert jwk.algorithm_name == "ES512"
 
     @crypto_required
     def test_should_load_key_ec_secp256k1_from_dict(self):
@@ -120,6 +125,7 @@ def test_should_load_key_ec_secp256k1_from_dict(self):
         assert jwk.key_type == "EC"
         assert isinstance(jwk.Algorithm, ECAlgorithm)
         assert jwk.Algorithm.hash_alg == ECAlgorithm.SHA256
+        assert jwk.algorithm_name == "ES256K"
 
     @crypto_required
     def test_should_load_key_hmac_from_dict(self):
@@ -131,6 +137,7 @@ def test_should_load_key_hmac_from_dict(self):
         assert jwk.key_type == "oct"
         assert isinstance(jwk.Algorithm, HMACAlgorithm)
         assert jwk.Algorithm.hash_alg == HMACAlgorithm.SHA256
+        assert jwk.algorithm_name == "HS256"
 
     @crypto_required
     def test_should_load_key_hmac_without_alg_from_dict(self):
@@ -143,6 +150,7 @@ def test_should_load_key_hmac_without_alg_from_dict(self):
         assert jwk.key_type == "oct"
         assert isinstance(jwk.Algorithm, HMACAlgorithm)
         assert jwk.Algorithm.hash_alg == HMACAlgorithm.SHA256
+        assert jwk.algorithm_name == "HS256"
 
     @crypto_required
     def test_should_load_key_okp_without_alg_from_dict(self):
@@ -153,6 +161,7 @@ def test_should_load_key_okp_without_alg_from_dict(self):
 
         assert jwk.key_type == "OKP"
         assert isinstance(jwk.Algorithm, OKPAlgorithm)
+        assert jwk.algorithm_name == "EdDSA"
 
     @crypto_required
     def test_from_dict_should_throw_exception_if_arg_is_invalid(self):

From 3a27cea987003a08950c95e0fb91908b821c66ec Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 21:56:37 -0700
Subject: [PATCH 07/13] Test decode with PyJWK object.

---
 tests/test_api_jws.py | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/tests/test_api_jws.py b/tests/test_api_jws.py
index 33857161..772583dd 100644
--- a/tests/test_api_jws.py
+++ b/tests/test_api_jws.py
@@ -5,6 +5,7 @@
 
 from jwt.algorithms import NoneAlgorithm, has_crypto
 from jwt.api_jws import PyJWS
+from jwt.api_jwk import PyJWK
 from jwt.exceptions import (
     DecodeError,
     InvalidAlgorithmError,
@@ -250,6 +251,22 @@ def test_decodes_complete_valid_jws(self, jws, payload):
             ),
         }
 
+    def test_decodes_with_jwk(self, jws, payload):
+        jwk = PyJWK({
+            "kty": "oct",
+            "alg": "HS256",
+            "k": "c2VjcmV0",  # "secret"
+        })
+        example_jws = (
+            b"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9."
+            b"aGVsbG8gd29ybGQ."
+            b"gEW0pdU4kxPthjtehYdhxB9mMOGajt1xCKlGGXDJ8PM"
+        )
+
+        decoded_payload = jws.decode(example_jws, jwk, algorithms=["HS256"])
+
+        assert decoded_payload == payload
+
     # 'Control' Elliptic Curve jws created by another library.
     # Used to test for regressions that could affect both
     # encoding / decoding operations equally (causing tests

From e9ecde348350c7c0bb4c1286911d2e3c706e5d21 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 22:00:03 -0700
Subject: [PATCH 08/13] Test implicit algorithm with PyJWK.

---
 tests/test_api_jws.py | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/tests/test_api_jws.py b/tests/test_api_jws.py
index 772583dd..976e52f5 100644
--- a/tests/test_api_jws.py
+++ b/tests/test_api_jws.py
@@ -267,6 +267,40 @@ def test_decodes_with_jwk(self, jws, payload):
 
         assert decoded_payload == payload
 
+
+    def test_decodes_with_jwk_and_no_algorithm(self, jws, payload):
+        jwk = PyJWK({
+            "kty": "oct",
+            "alg": "HS256",
+            "k": "c2VjcmV0",  # "secret"
+        })
+        example_jws = (
+            b"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9."
+            b"aGVsbG8gd29ybGQ."
+            b"gEW0pdU4kxPthjtehYdhxB9mMOGajt1xCKlGGXDJ8PM"
+        )
+
+        decoded_payload = jws.decode(example_jws, jwk)
+
+        assert decoded_payload == payload
+
+
+    def test_decodes_with_jwk_and_mismatched_algorithm(self, jws, payload):
+        jwk = PyJWK({
+            "kty": "EC",
+            "crv": "P-256",
+            "x": "PTTjIY84aLtaZCxLTrG_d8I0G6YKCV7lg8M4xkKfwQ4",
+            "y": "ank6KA34vv24HZLXlChVs85NEGlpg2sbqNmR_BcgyJU"
+        })
+        example_jws = (
+            b"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9."
+            b"aGVsbG8gd29ybGQ."
+            b"gEW0pdU4kxPthjtehYdhxB9mMOGajt1xCKlGGXDJ8PM"
+        )
+
+        with pytest.raises(InvalidAlgorithmError):
+            jws.decode(example_jws, jwk)
+
     # 'Control' Elliptic Curve jws created by another library.
     # Used to test for regressions that could affect both
     # encoding / decoding operations equally (causing tests

From 930ce803ef761e183de09485d3e90e07223927a5 Mon Sep 17 00:00:00 2001
From: "pre-commit-ci[bot]"
 <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Date: Mon, 16 Oct 2023 05:01:31 +0000
Subject: [PATCH 09/13] [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci
---
 tests/test_api_jws.py | 42 +++++++++++++++++++++++-------------------
 1 file changed, 23 insertions(+), 19 deletions(-)

diff --git a/tests/test_api_jws.py b/tests/test_api_jws.py
index 976e52f5..0ede4581 100644
--- a/tests/test_api_jws.py
+++ b/tests/test_api_jws.py
@@ -4,8 +4,8 @@
 import pytest
 
 from jwt.algorithms import NoneAlgorithm, has_crypto
-from jwt.api_jws import PyJWS
 from jwt.api_jwk import PyJWK
+from jwt.api_jws import PyJWS
 from jwt.exceptions import (
     DecodeError,
     InvalidAlgorithmError,
@@ -252,11 +252,13 @@ def test_decodes_complete_valid_jws(self, jws, payload):
         }
 
     def test_decodes_with_jwk(self, jws, payload):
-        jwk = PyJWK({
-            "kty": "oct",
-            "alg": "HS256",
-            "k": "c2VjcmV0",  # "secret"
-        })
+        jwk = PyJWK(
+            {
+                "kty": "oct",
+                "alg": "HS256",
+                "k": "c2VjcmV0",  # "secret"
+            }
+        )
         example_jws = (
             b"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9."
             b"aGVsbG8gd29ybGQ."
@@ -267,13 +269,14 @@ def test_decodes_with_jwk(self, jws, payload):
 
         assert decoded_payload == payload
 
-
     def test_decodes_with_jwk_and_no_algorithm(self, jws, payload):
-        jwk = PyJWK({
-            "kty": "oct",
-            "alg": "HS256",
-            "k": "c2VjcmV0",  # "secret"
-        })
+        jwk = PyJWK(
+            {
+                "kty": "oct",
+                "alg": "HS256",
+                "k": "c2VjcmV0",  # "secret"
+            }
+        )
         example_jws = (
             b"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9."
             b"aGVsbG8gd29ybGQ."
@@ -284,14 +287,15 @@ def test_decodes_with_jwk_and_no_algorithm(self, jws, payload):
 
         assert decoded_payload == payload
 
-
     def test_decodes_with_jwk_and_mismatched_algorithm(self, jws, payload):
-        jwk = PyJWK({
-            "kty": "EC",
-            "crv": "P-256",
-            "x": "PTTjIY84aLtaZCxLTrG_d8I0G6YKCV7lg8M4xkKfwQ4",
-            "y": "ank6KA34vv24HZLXlChVs85NEGlpg2sbqNmR_BcgyJU"
-        })
+        jwk = PyJWK(
+            {
+                "kty": "EC",
+                "crv": "P-256",
+                "x": "PTTjIY84aLtaZCxLTrG_d8I0G6YKCV7lg8M4xkKfwQ4",
+                "y": "ank6KA34vv24HZLXlChVs85NEGlpg2sbqNmR_BcgyJU",
+            }
+        )
         example_jws = (
             b"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9."
             b"aGVsbG8gd29ybGQ."

From bb057c1a32d2b31a0748309b9be9bb90832227cc Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 22:06:05 -0700
Subject: [PATCH 10/13] Flake8 fix.

---
 jwt/api_jwt.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/jwt/api_jwt.py b/jwt/api_jwt.py
index ccfd6691..b4cb6b72 100644
--- a/jwt/api_jwt.py
+++ b/jwt/api_jwt.py
@@ -7,7 +7,7 @@
 from datetime import datetime, timedelta, timezone
 from typing import TYPE_CHECKING, Any
 
-from . import api_jwk, api_jws
+from . import api_jws
 from .exceptions import (
     DecodeError,
     ExpiredSignatureError,

From 1d16024a99b24de84ae989610de23da13dcbf971 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 22:23:23 -0700
Subject: [PATCH 11/13] Refactor to fix a mypy error.

---
 jwt/api_jwk.py |  5 +++--
 jwt/api_jws.py | 25 +++++++++++++------------
 2 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/jwt/api_jwk.py b/jwt/api_jwk.py
index f03170e0..6635763c 100644
--- a/jwt/api_jwk.py
+++ b/jwt/api_jwk.py
@@ -53,9 +53,10 @@ def __init__(self, jwk_data: JWKDict, algorithm: str | None = None) -> None:
             raise PyJWKError(f"{algorithm} requires 'cryptography' to be installed.")
 
         self.algorithm_name = algorithm
-        self.Algorithm = self._algorithms.get(algorithm)
 
-        if not self.Algorithm:
+        if algorithm in self._algorithms:
+            self.Algorithm = self._algorithms[algorithm]
+        else:
             raise PyJWKError(f"Unable to find an algorithm for key: {self._jwk_data}")
 
         self.key = self.Algorithm.from_jwk(self._jwk_data)
diff --git a/jwt/api_jws.py b/jwt/api_jws.py
index a42bf611..5822ebf6 100644
--- a/jwt/api_jws.py
+++ b/jwt/api_jws.py
@@ -191,12 +191,7 @@ def decode_complete(
         merged_options = {**self.options, **options}
         verify_signature = merged_options["verify_signature"]
 
-        if isinstance(key, PyJWK):
-            if algorithms is None:
-                algorithms = [key.algorithm_name]
-            key = key.key
-
-        if verify_signature and not algorithms:
+        if verify_signature and not algorithms and not isinstance(key, PyJWK):
             raise DecodeError(
                 'It is required that you pass in a value for the "algorithms" argument when calling decode().'
             )
@@ -295,9 +290,11 @@ def _verify_signature(
         signing_input: bytes,
         header: dict[str, Any],
         signature: bytes,
-        key: AllowedPublicKeys | str | bytes = "",
+        key: AllowedPublicKeys | PyJWK | str | bytes = "",
         algorithms: list[str] | None = None,
     ) -> None:
+        if algorithms is None and isinstance(key, PyJWK):
+            algorithms = [key.algorithm_name]
         try:
             alg = header["alg"]
         except KeyError:
@@ -306,11 +303,15 @@ def _verify_signature(
         if not alg or (algorithms is not None and alg not in algorithms):
             raise InvalidAlgorithmError("The specified alg value is not allowed")
 
-        try:
-            alg_obj = self.get_algorithm_by_name(alg)
-        except NotImplementedError as e:
-            raise InvalidAlgorithmError("Algorithm not supported") from e
-        prepared_key = alg_obj.prepare_key(key)
+        if isinstance(key, PyJWK):
+            alg_obj = key.Algorithm
+            prepared_key = key.key
+        else:
+            try:
+                alg_obj = self.get_algorithm_by_name(alg)
+            except NotImplementedError as e:
+                raise InvalidAlgorithmError("Algorithm not supported") from e
+            prepared_key = alg_obj.prepare_key(key)
 
         if not alg_obj.verify(signing_input, prepared_key, signature):
             raise InvalidSignatureError("Signature verification failed")

From 19094333dd7394f7c35e3eb6701d4128a5831305 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Sun, 15 Oct 2023 22:33:28 -0700
Subject: [PATCH 12/13] Update sample usage.

---
 docs/usage.rst | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/docs/usage.rst b/docs/usage.rst
index 9a673c3e..55097e82 100644
--- a/docs/usage.rst
+++ b/docs/usage.rst
@@ -291,8 +291,7 @@ Retrieve RSA signing keys from a JWKS endpoint
     >>> signing_key = jwks_client.get_signing_key_from_jwt(token)
     >>> data = jwt.decode(
     ...     token,
-    ...     signing_key.key,
-    ...     algorithms=["RS256"],
+    ...     signing_key,
     ...     audience="https://expenses-api",
     ...     options={"verify_exp": False},
     ... )
@@ -356,8 +355,7 @@ is not built into pyjwt.
     # now, decode_complete to get payload + header
     data = jwt.decode_complete(
         id_token,
-        key=signing_key.key,
-        algorithms=signing_algos,
+        key=signing_key,
         audience=client_id,
     )
     payload, header = data["payload"], data["header"]

From 4e6a7beb09e86faa3d798734232ff1c9d2f0cf54 Mon Sep 17 00:00:00 2001
From: Theron Luhn <theron@luhn.com>
Date: Mon, 16 Oct 2023 10:12:35 -0700
Subject: [PATCH 13/13] Fix test.

---
 tests/test_api_jws.py | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/tests/test_api_jws.py b/tests/test_api_jws.py
index 0ede4581..c764f09f 100644
--- a/tests/test_api_jws.py
+++ b/tests/test_api_jws.py
@@ -290,10 +290,9 @@ def test_decodes_with_jwk_and_no_algorithm(self, jws, payload):
     def test_decodes_with_jwk_and_mismatched_algorithm(self, jws, payload):
         jwk = PyJWK(
             {
-                "kty": "EC",
-                "crv": "P-256",
-                "x": "PTTjIY84aLtaZCxLTrG_d8I0G6YKCV7lg8M4xkKfwQ4",
-                "y": "ank6KA34vv24HZLXlChVs85NEGlpg2sbqNmR_BcgyJU",
+                "kty": "oct",
+                "alg": "HS512",
+                "k": "c2VjcmV0",  # "secret"
             }
         )
         example_jws = (