[security] Update pyjwt, pyopenssl, pyasn1 (#1397)

Author: BenjaminPelletier

monitoring/monitorlib/auth_validation.py

@@ -11,7 +11,6 @@
 class Authorization(NamedTuple):
     client_id: str
     scopes: list[str]
-    issuer: str
 
 
 class InvalidScopeError(Exception):
@@ -99,6 +98,7 @@ def wrapper(*args, **kwargs):
                         client_id = (
                             r["client_id"] if "client_id" in r else r.get("sub", None)
                         )
+                        assert isinstance(client_id, str)
                     except jwt.ImmatureSignatureError:
                         raise InvalidAccessTokenError("Access token is immature.")
                     except jwt.ExpiredSignatureError:
@@ -113,10 +113,7 @@ def wrapper(*args, **kwargs):
                         raise InvalidAccessTokenError(
                             f"Unexpected InvalidTokenError: {str(e)}"
                         )
-                    issuer = r.get("iss", None)
-                    flask.request.jwt = Authorization(
-                        client_id, provided_scopes, issuer
-                    )
+                    flask.request.jwt = Authorization(client_id, provided_scopes)
 
                 return fn(*args, **kwargs)