pyjwt[crypto] 2.0.0与django不兼容的更新

Question

昨天我有一个使用django-allauth 0.44.0. (12/22/20)的项目，当我试图安装运行pip的依赖项时， pyjwt将您的版本更新为2.0.0.，使用docker-compose返回此错误消息

Collecting pyjwt[crypto]>=1.7
ERROR: In --require-hashes mode, all requirements must have their versions pinned with ==. These do not:
pyjwt[crypto]>=1.7 from https://files.pythonhosted.org/packages/91/5f/5cff1c3696e0d574f5741396550c9a308dde40704d17e39e94b89c07d789/PyJWT-2.0.0-py3-none-any.whl#sha256=5c.... (from django-allauth==0.44.0->-r requirements-dev.txt (line 125))
ERROR: Service 'web' failed to build: The command '/bin/sh -c pip install -r requirements-dev.txt' returned a non-zero code: 1

在Poetry.lock中：

[[package]]
name = "django-allauth"
version = "0.44.0"
description = "Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication."
category = "main"
optional = false
python-versions = "*"

[package.dependencies]
Django = ">=2.0"
pyjwt = {version = ">=1.7", extras = ["crypto"]}
python3-openid = ">=3.0.8"
requests = "*"
requests-oauthlib = ">=0.3.0"

[[package]]
name = "pyjwt"
version = "1.7.1"
description = "JSON Web Token implementation in Python"
category = "main"
optional = false
python-versions = "*"

有谁有同样的问题吗？谢谢

Answer 1

我也面临同样的问题，只需安装稍高一点的all-auth版本( pip install django-allauth=0.31.0)和错误go。