Merge pull request #47 from IdentityPython/develop

Mostly changes to do with issues discovered during certification.

Author: peppelinux

.github/workflows/pypi.yml

@@ -0,0 +1,35 @@
+name: Publish Python distribution to PyPI
+on:
+  release:
+    types:
+      - published
+
+jobs:
+  build-n-publish:
+    name: Publish Python distribution to PyPI
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Setup Python 3.8
+        uses: actions/setup-python@v1
+        with:
+          python-version: 3.8
+      - name: Install pypa/build
+        run: >-
+          python -m
+          pip install
+          build
+          --user
+      - name: Build a binary wheel and a source tarball
+        run: >-
+          python -m
+          build
+          --sdist
+          --wheel
+          --outdir dist/
+          .
+      - name: Publish distribution to PyPI
+        uses: pypa/gh-action-pypi-publish@master
+        with:
+          user: __token__
+          password: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/python-ci.yml

@@ -0,0 +1,59 @@
+# This workflow will install Python dependencies, run tests and lint with a single version of Python
+# For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions
+
+name: oidcmsg
+
+on:
+  push:
+    branches: [ master, develop ]
+  pull_request:
+    branches: [ master, develop ]
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version:
+          - '3.7'
+          - '3.8'
+          - '3.9'
+
+    steps:
+    - uses: actions/checkout@v2
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v2
+      with:
+        python-version: ${{ matrix.python-version }}
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        if [ -f requirements-dev.txt ]; then pip install -r requirements-dev.txt; fi
+        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+        python setup.py install
+    - name: Lint with flake8
+      run: |
+        # stop the build if there are Python syntax errors or undefined names
+        flake8 src/oidcmsg --count --select=E9,F63,F7,F82 --show-source --statistics
+        # exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide
+        flake8 src/oidcmsg --max-line-length 120 --count --exit-zero --statistics
+
+    - name: Test with pytest
+      run: |
+        pytest --cov=oidcmsg tests/
+    - name: Bandit Security Scan
+      run: |
+        bandit --skip B105,B106,B107 -r src/oidcmsg/
+    #- name: Upload coverage to Codecov
+      #uses: codecov/codecov-action@v1
+      #with:
+        #token: ${{ secrets.CODECOV_TOKEN }}
+        #file: example/coverage.xml
+        #flags: unittests
+        #env_vars: OS,PYTHON
+        #name: codecov-umbrella
+        #fail_ci_if_error: true
+        #path_to_write_report: ./codecov_report.txt

.travis.yml

@@ -1,4 +1,11 @@
 # oidcmsg
+
+![CI build](https://github.com/IdentityPython/oidcmsg/workflows/oidcmsg/badge.svg)
+![pypi](https://img.shields.io/pypi/v/oidcmsg.svg)
+[![Downloads](https://pepy.tech/badge/oidcmsg)](https://pepy.tech/project/oidcmsg)
+[![Downloads](https://pepy.tech/badge/oidcmsg/week)](https://pepy.tech/project/oidcmsg)
+![License](https://img.shields.io/badge/license-Apache%202-blue.svg)
+
 Implementation of OIDC protocol messages.
 
 oidcmsg is the 2nd layer in the
@@ -10,17 +17,17 @@ It also does verification of messages , that is :
 
 + verifies that all the required parameters are present and has a value
 + verifies that the parameter values are of the right type
-+ verifies that if there is a list of permitted values, a parameter value is on 
++ verifies that if there is a list of permitted values, a parameter value is on
 that list.
 
 and finally if the value is a signed and/or encrypted JWT this package
-will perform the necessary decryption and signature verification. 
+will perform the necessary decryption and signature verification.
 
 
-Also implements a **KeyJar** which keeps keys belonging to 
+Also implements a **KeyJar** which keeps keys belonging to
 different owners. One owner may have many keys.
 If some of these keys have a common origin, like described in a JWKS.
 Such a set will be kept in a **keyBundle**.
-Also implemented in this package. 
-   
+Also implemented in this package.
+
 Please read the [Official Documentation](https://oidcmsg.readthedocs.io/) for getting usage examples and further informations.