Why jwt.py included in Pypi package ?

[jpadilla]

Why jwt.py included in Pypi package ?

[twidi]

Hum i don't unterstand, i don't see the file in the tar.gz from pypi... but i can assure you that it's in my virtualenv !

I'll try a fresh new one to see.

[twidi]

Ok, it's not in djangorestframework-jwt-0.1.4.tar.gz, but in the wheel djangorestframework_jwt-0.1.4-py2.py3-none-any.whl

Is this an accident ?

[jpadilla]

@twidi It must definitely be an "accident" left over from initial releases. I'll take a look at why the wheel is not been updated.

[twidi]

thanks a lot :)

[jpadilla]

@twidi just fixed the last release on PyPI. It was a dirty build that still had that old file. If you have any other issues feel free to open a new issue. Thanks again!

[stanhu]

Next time I think it's better to bump the release because changing the binary will cause confusion with the pip download cache:

Hash of the package https://pypi.python.org/packages/source/d/djangorestframework-jwt/djangorestframework-jwt-0.1.4.tar.gz#md5=c3e10e72aa429f183edc6081a57693d0 (from https://pypi.python.org/simple/djangorestframework-jwt/) (<md5 HASH object @ 0x1bdada0>) doesn't match the expected hash c3e10e72aa429f183edc6081a57693d0!
Bad md5 hash for package https://pypi.python.org/packages/source/d/djangorestframework-jwt/djangorestframework-jwt-0.1.4.tar.gz#md5=c3e10e72aa429f183edc6081a57693d0 (from https://pypi.python.org/simple/djangorestframework-jwt/)

[jpadilla]

@stanhu thanks for that! Do you think I should still release a new version to fix this? Would that fix the pip download cache issue?

[stanhu]

If you have a lot of people depending upon 0.1.4 now, I would say that it's probably a good idea to release a new version. Otherwise, it's a a minor issue. I resolved the MD5 mismatch issue by removing the cached .tar.gz from my build directory and calling pip install again.