Fix list iteration in claim format validation

.github/workflows/build.yml

@@ -20,6 +20,7 @@
                         "python-311",
                         "python-312",
                         "python-313",
+                        "python-314",
                         "doc",
                         "doctest",
                         "sphinx",
@@ -64,49 +65,55 @@
                             "toxenv": "py313",
                             "arch": "x64",
                         },
+                        {
+                            "name": "python-314",
+                            "python": "3.14",
+                            "toxenv": "py314",
+                            "arch": "x64",
+                        },
                         {
                             "name": "doc",
-                            "python": "3.13",
+                            "python": "3.14",
                             "toxenv": "doc",
                             "arch": "x64",
                         },
                         {
                             "name": "doctest",
-                            "python": "3.13",
+                            "python": "3.14",
                             "toxenv": "doctest",
                             "arch": "x64",
                         },
                         {
                             "name": "sphinx",
-                            "python": "3.13",
+                            "python": "3.14",
                             "toxenv": "sphinx",
                             "arch": "x64",
                         },
                         {
                             "name": "lint",
-                            "python": "3.13",
+                            "python": "3.14",
                             "toxenv": "lint",
                             "arch": "x64",
                         },
                         {
                             "name": "pep8",
-                            "python": "3.13",
+                            "python": "3.14",
                             "toxenv": "pep8",
                             "arch": "x64",
                         },
                         {
                             "name": "codespell",
-                            "python": "3.13",
+                            "python": "3.14",
                             "toxenv": "codespell",
                             "arch": "x64",
                         },
                     ],
                 },
             },
             "steps": [
-                { "uses": "actions/checkout@v4" },
+                { "uses": "actions/checkout@v6" },
                 {
-                    "uses": "actions/setup-python@v5",
+                    "uses": "actions/setup-python@v6",
                     "with": {
                         "python-version": "${{ matrix.python }}",
                         "architecture": "${{ matrix.arch }}"

jwcrypto/jwt.py

@@ -433,7 +433,7 @@ def _check_array_or_string_claim(self, name, claims):
         if name not in claims or claims[name] is None:
             return
         if isinstance(claims[name], list):
-            if any(not isinstance(claim, str) for claim in claims):
+            if any(not isinstance(claim, str) for claim in claims[name]):
                 raise JWTInvalidClaimFormat(
                     "Claim %s contains non StringOrURI types" % (name, ))
         elif not isinstance(claims[name], str):

jwcrypto/tests.py

@@ -1895,6 +1895,18 @@ def test_Issue_277(self):
                           jwt=sertok, check_claims={"aud": ["nomatch",
                                                             "failmatch"]})
 
+    def test_claim_aud(self):
+        claims = {"aud": "www.example.com"}
+        key = jwk.JWK(generate='oct', size=256)
+        token = jwt.JWT(header={"alg": "HS256"}, claims=claims)
+        token.make_signed_token(key)
+        sertok = token.serialize()
+        check_claim = {"aud": ["www.example.com", 123]}
+        self.assertRaises(jwt.JWTInvalidClaimFormat, jwt.JWT, key=key,
+                          jwt=sertok, check_claims=check_claim)
+        check_claim = {"aud": ["www.example.com", "123"]}
+        jwt.JWT(key=key, jwt=sertok, check_claims=check_claim)
+
     def test_unexpected(self):
         key = jwk.JWK(generate='oct', size=256)
         claims = {"testclaim": "test"}

tox.ini

@@ -1,5 +1,5 @@
 [tox]
-envlist = lint,py38,py39,py310,py311,py312,py313,pep8,doc,sphinx,doctest
+envlist = lint,py38,py39,py310,py311,py312,py313,py314,pep8,doc,sphinx,doctest
 skip_missing_interpreters = true
 
 [testenv]
@@ -16,15 +16,15 @@ commands =
     {envpython} -m coverage report -m
 
 [testenv:lint]
-basepython = python3.13
+basepython = python3.14
 deps =
     pylint
 #sitepackages = True
 commands =
     {envpython} -m pylint -d c,r,i,W0613 -r n -f colorized --notes= --disable=star-args ./jwcrypto
 
 [testenv:pep8]
-basepython = python3.13
+basepython = python3.14
 deps =
     flake8
     flake8-import-order
@@ -37,13 +37,13 @@ deps =
     doc8
     docutils
     markdown
-basepython = python3.13
+basepython = python3.14
 commands =
     doc8 --allow-long-titles README.md
     markdown_py README.md -f {toxworkdir}/README.md.html
 
 [testenv:sphinx]
-basepython = python3.13
+basepython = python3.14
 changedir = docs/source
 deps =
     sphinx
@@ -52,15 +52,15 @@ commands =
     sphinx-build -n -v -W -b html -d {envtmpdir}/doctrees . {envtmpdir}/html
 
 [testenv:doctest]
-basepython = python3.13
+basepython = python3.14
 changedir = docs/source
 deps =
     sphinx
 commands =
     sphinx-build -v -W -b doctest -d {envtmpdir}/doctrees . {envtmpdir}/doctest
 
 [testenv:codespell]
-basepython = python3.13
+basepython = python3.14
 deps =
     codespell
 commands =