primordic/IssueDupesLite huggingface dataset:
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #2408: Code With Me / IntelliJ Remote Development / Fleet Support
Created: 2021-12-04T05:14:21Z
Love the plugin so much it annoys me when I am in a remote session and the tags are all white. Not sure if this is known or not, but it doesnt appear to work with the 'code with me' feature of PHPstorm. The plugin installs via the market place, but when editing the tags all remain the same color. I can confirm the config shows and other plugins work.

Duplicate issue #2736: 使用IDEA的ssh远程开发时插件报错
Created: 2024-05-15T01:10:22Z
Have you checked the issues and discussions to ensure there are no duplicates?
Yes
Your programming languages
java
Free or paid?
Free users
Expected Behavior
正常启动运行
Current Behavior
启动时插件报错

本地环境启动运行是没问题的，远程开发时才报错。
Code snippet for reproduce
无
Your Environment
IntelliJ IDEA 2024.1.2 Preview
Build #JBC-241.17011.2, built on May 7, 2024
Licensed to xx
You have a perpetual fallback license for this version.
Subscription is active until April 21, 2025.
Runtime version: 17.0.11+1-b1207.20 amd64
VM: OpenJDK 64-Bit Server VM by JetBrains s.r.o.
Windows 11.0
Controller in Remote Development
GC: G1 Young Generation, G1 Old Generation
Memory: 1500M
Cores: 16
Registry:
ide.experimental.ui=true
editor.minimap.enabled=true
terminal.new.ui=true
rdclient.backend.actionHandlers=false
Non-Bundled Plugins:
com.intellij.plugins.visualstudiokeymap (241.14494.150)
com.intellij.plugins.netbeanskeymap (241.14494.150)
com.intellij.plugins.eclipsekeymap (241.14494.150)
Key Promoter X (2024.1.0)

Closing comment (2024-05-15T01:14:52Z): This plugin depends on com.intellij.modules.lang:

  
    
      intellij-rainbow-brackets/src/main/resources/META-INF/plugin.xml
    
    
         Line 715
      in
      f7fb063
    
  
  
    

        
          
           <depends>com.intellij.modules.lang</depends> 
        
    
  


But the Intellij Remote Development / Gateway does not have this module, so it would not be possible to support it at this moment.
Related to #2408
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #65: Enable option to specify scope highlighting and text flattening effect duration
Created: 2018-05-21T13:28:47Z
Expected Behavior

If you're suggesting a change/improvement, tell us how it should work
There's an option in the settings menu (Other Settings/Rainbow Brackets) that allows the user to determine for how long does the highlighting/flattening effect stay in place after being activated. I would expect to be the options: "Do not remove effect until clicking", "Remove after releasing Ctrl/Alt key" and "Remove effect after X milliseconds" to be available.

Current Behavior

If suggesting a change/improvement, explain the difference from current behavior
Currently the highlighting/flattening effect disappears after release the Ctrl or Alt key, respectively.

Duplicate issue #188: Can not scroll when highlight activated
Created: 2018-11-08T08:09:15Z
Expected Behavior
When I activate rainbow bracket highlight with ⌘ + Button3 click, I can scroll editor with touchpad (two fingers scroll)
Current Behavior
When rainbow bracket highlight is activated, I can not scroll editor with touchpad
I don't know whether it's a bug or it's designed to be like that.
Your Environment

Plugin version: 5.10

WebStorm 2018.2.5
Build #WS-182.4892.25, built on October 18, 2018
Subscription is active until November 5, 2019
JRE: 1.8.0_152-release-1248-b19 x86_64
JVM: OpenJDK 64-Bit Server VM by JetBrains s.r.o
macOS 10.14.1

Closing comment (2018-11-08T15:19:36Z): I think this may be related to #65 . I mean if #65 implemented, you could scroll the editor while highlighting.
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #65: Enable option to specify scope highlighting and text flattening effect duration
Created: 2018-05-21T13:28:47Z
Expected Behavior

If you're suggesting a change/improvement, tell us how it should work
There's an option in the settings menu (Other Settings/Rainbow Brackets) that allows the user to determine for how long does the highlighting/flattening effect stay in place after being activated. I would expect to be the options: "Do not remove effect until clicking", "Remove after releasing Ctrl/Alt key" and "Remove effect after X milliseconds" to be available.

Current Behavior

If suggesting a change/improvement, explain the difference from current behavior
Currently the highlighting/flattening effect disappears after release the Ctrl or Alt key, respectively.

Duplicate issue #169: Copy/Paste the "selection"
Created: 2018-08-14T20:51:30Z
I think the ability to copy/paste the highlighted scope would be an interesting feature, no?
I assigned the plugin to the left double click, which can simulate a selection with the mouse as on Eclipse for example. But for the moment, copy/paste is not possible. #

Closing comment (2018-08-15T09:55:07Z): Maybe related to #65  "Do not remove effect until clicking".
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #2408: Code With Me / IntelliJ Remote Development / Fleet Support
Created: 2021-12-04T05:14:21Z
Love the plugin so much it annoys me when I am in a remote session and the tags are all white. Not sure if this is known or not, but it doesnt appear to work with the 'code with me' feature of PHPstorm. The plugin installs via the market place, but when editing the tags all remain the same color. I can confirm the config shows and other plugins work.

Duplicate issue #2442: Does not work with IntelliJ Remote Development
Created: 2022-02-02T00:02:24Z
Please check

 I already support this project.
 If you are submitting a feature request, please do consider donating us on Open Collective Or by AliPay/WeChatPay.
 This issue/feature request is not reported before.

Your programming languages
TypeScript, Java
Expected Behavior
When Rainbow Brackets is installed while using Remote Development, brackets should be colorized ( https://www.jetbrains.com/help/idea/remote-development-starting-page.html )
Current Behavior
Brackets do not show rainbow colors, despite plugin being installed and enabled. It works if running locally in IntelliJ IDEA rather than using remote development. The Jetbrains Client did not report any errors
Possible Solution
As a temporary workaround, I installed Nested Brackets Colorer. This works, but I do not like it as much as Rainbow Brackets.
Code snippet for reproduce (for bugs)
N/A
Your Environment

Plugin version: 6.21

JetBrains Client 2021.3
Build #JBC-213.6777.52, built on January 27, 2022
Licensed to (removed for privacy)

Runtime version: 11.0.13+7-b1751.25 amd64
VM: OpenJDK 64-Bit Server VM by JetBrains s.r.o.
Windows 10 10.0
GC: G1 Young Generation, G1 Old Generation
Memory: 1500M
Cores: 8
Registry:
    rdclient.backend.actionHandlers=false

Additionally, the remote host is running Linux and has IntelliJ IDEA.

Closing comment (2022-02-07T10:08:26Z): Related to #2408 and will be related to JetBrains Fleet IDE.
I will merge them to #2048
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #234: Color is displayed with wrong order in C# code
Created: 2019-06-30T04:03:38Z
Problems

I've set color order like above screenshot. However, in the text editor, color order is different with my option.

This is Rider screenshot. My order is white -> green -> yellow -> blue -> red, but displayed order is green -> yellow -> blue -> red -> white.

In IntelliJ IDEA, the color is displayed exactly as I intended.
Your Environment

Plugin version: v5.19
IDE & Operating System version, comment your env as below(go to "About IntelliJ IDEA" -> click the "copy" icon):
NOTE: If you are going to report a bug but WITHOUT your env information, your issue will been closed directly.

JetBrains Rider 2019.1.2
Build #RD-191.7141.355, built on June 5, 2019
JRE: 1.8.0_202-release-1483-b58 amd64
JVM: OpenJDK 64-Bit Server VM by JetBrains s.r.o
Windows 10 10.0

Duplicate issue #180: Custom `Matched brace` color scheme
Created: 2018-10-11T18:04:20Z
Expected Behavior
User should have a possibility to chooseMatched brace color scheme ( File | Settings | Editor | Color Scheme | General | Matched brace).
Current Behavior
At every startup those colors are being overriden by plugin with colors that look too pale for brackets for which plugin is not turned on.
Possible Solution
An option to not override Matched brace color scheme.
Environment


Plugin version:
v5.10


System:


IntelliJ IDEA 2018.3 EAP (Ultimate Edition)
Build #IU-183.3647.12, built on October 10, 2018
JRE: 1.8.0_152-release-1343-b5 amd64
JVM: OpenJDK 64-Bit Server VM by JetBrains s.r.o
Linux 4.15.0-36-generic

Closing comment (2019-08-24T06:40:51Z): Seems related to #234, please try this snapshot.
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #2408: Code With Me / IntelliJ Remote Development / Fleet Support
Created: 2021-12-04T05:14:21Z
Love the plugin so much it annoys me when I am in a remote session and the tags are all white. Not sure if this is known or not, but it doesnt appear to work with the 'code with me' feature of PHPstorm. The plugin installs via the market place, but when editing the tags all remain the same color. I can confirm the config shows and other plugins work.

Duplicate issue #2737: Can't enable plugin in gateway client for idea
Created: 2024-05-19T22:46:38Z
Have you checked the issues and discussions to ensure there are no duplicates?
Yes
Your programming languages
Java
Free or paid?
Free users
Expected Behavior
Plugin should load
Current Behavior

Code snippet for reproduce
N.A
Your Environment
IntelliJ IDEA 2024.1.1
Build #JBC-241.15989.150, built on April 29, 2024
Licensed to null null
Subscription is active until October 11, 2024.
Runtime version: 17.0.10+1-b1207.14 amd64
VM: OpenJDK 64-Bit Server VM by JetBrains s.r.o.
Windows 11.0
Controller in Remote Development
GC: G1 Young Generation, G1 Old Generation
Memory: 1500M
Cores: 22
Registry:
ide.balloon.shadow.size=0
ide.new.editor.tabs.vertical.borders=true
ide.animate.toolwindows=true
ide.experimental.ui=true
ide.editor.tab.selection.animation=true
rdclient.backend.actionHandlers=false
Non-Bundled Plugins:
com.mallowigi (96.0.0)
com.intellij.plugins.visualstudiokeymap (241.14494.150)
com.intellij.plugins.netbeanskeymap (241.14494.150)
com.intellij.plugins.eclipsekeymap (241.14494.150)
com.chrisrm.idea.MaterialThemeUI (9.2.1)

Closing comment (2024-05-20T01:28:00Z): This plugin depends on com.intellij.modules.lang:

  
    
      intellij-rainbow-brackets/src/main/resources/META-INF/plugin.xml
    
    
         Line 715
      in
      f7fb063
    
  
  
    

        
          
           <depends>com.intellij.modules.lang</depends> 
        
    
  


But the Intellij Remote Development / Gateway does not have this module, so it would not be possible to support it at this moment.
Related to #2408
Repository: izhangzhihao/intellij-rainbow-brackets

Issue #49: Make the preview images smaller
Created: 2018-05-01T14:24:20Z
They fill up the whole plugin window and have sideways scrolling

Duplicate issue #51: Preview image become unreadable
Created: 2018-05-03T11:13:28Z
Expected Behavior
Preview image should be representative
Current Behavior
Preview image is a mess (see screens)
Code snippet for reproduce (for bugs)


Your Environment

Plugin version: 5.2
IDE & Operating System version, comment your env as below(go to "About IntelliJ IDEA" -> click the "copy" icon):

WebStorm 2018.1.2
Build #WS-181.4668.60, built on April 23, 2018
Licensed to Oleksii Bobyr
Subscription is active until November 2, 2018
JRE: 1.8.0_152-release-991-b1 amd64
JVM: OpenJDK 64-Bit Server VM by JetBrains s.r.o
Windows 10 10.0

Closing comment (2018-05-03T11:27:24Z): Related to #49
Repository: javaparser/javaparser

Issue #655: Automatically generate copyright headers in all source files
Created: 2016-12-18T11:15:38Z
Would be a nice thing for the bootstrap module I'm building.

Duplicate issue #1259: Consider using the maven-license-plugin
Created: 2017-11-25T16:44:26Z
It should help ensuring all the files have the right license message

Closing comment (2017-11-25T17:57:00Z): My bad :)
Closing as duplicate of #655
Repository: javaparser/javaparser

Issue #1121: Method reference not annotatable?
Created: 2017-09-07T18:21:37Z
JavaParser doesn't seem to like the annotation here:
      Ext.func(Ext.func(@CJ WeakReference::new));

Duplicate issue #1120: Odd parse error
Created: 2017-09-07T18:19:22Z
JavaParser trips on the first "return" but this seems to be valid code:
    public Function func(@V AllLocations this) {
        try (final ParamStream<@W Integer @X []> fs = new ParamStream<@Y Integer @Z []>(new File("testfile"))) {
            return @AA AllLocations.Inner<@AB String>::<@AC Integer>new;
        } catch(@AD Exception ex) {
            return null;
        }
    }

Closing comment (2017-09-08T17:34:30Z): Seems like a duplicate of #1121 then
Repository: javaparser/javaparser

Issue #372: TypedNode implies a get/set when NodeWithModifiers(and others) only implies a get
Created: 2016-07-14T23:11:55Z
TypedNode implies a get/set when NodeWithModifiers only implies a get, shouldn't it implies a set too ? It's the same for NamedNode.
DocumentableNode is a bit different, should we put in here getComment and setComment ? or should we have set every type of comment and get every type of comment > will conflict with the final modifier of Node#setComment

Duplicate issue #242: @FunctionalInterface annotation should be used to flag Single Abstract Method interfaces
Created: 2015-12-14T12:14:49Z
A Single Abstract Method (SAM) interface is a Java interface containing only one method. The Java API is full of SAM interfaces, such as java.lang.Runnable, java.awt.event.ActionListener, java.util.Comparator and java.util.concurrent.Callable. SAM interfaces have a special place in Java 8 because they can be implemented using Lambda expressions or Method references.
Using @FunctionalInterface forces a compile break when an additional, non-overriding abstract method is added to a SAM, which would break the use of Lambda implementations.

Closing comment (2016-07-17T16:41:35Z): With my modifications for #363 and related to  #372 , those 2 interfaces have more than 1 method now
Repository: javaparser/javaparser

Issue #1949: JSS can't resolve super-default method reference
Created: 2018-12-03T12:36:10Z
Found another issue. (Sample project)
This one's quite simple, JSS is unable to solve a method call like this one:
MyInterface.super.defaultMethod();

Duplicate issue #1962: UnsolvedSymbolException thrown on super.<method> declaration inside inner class
Created: 2018-12-10T16:33:00Z
Hi,
consider the following source:
public class X { 
    java.util.List x() { 
        return new java.util.ArrayList() { 
            public int size() { 
                return super.size(); 
            } 
        }; 
    } 
}

When trying to resolve the MethodCallExpr, I get an UnsolvedSymbolException:
UnsolvedSymbolException{context='null', name='We are unable to find the method declaration corresponding to super.size()', cause='null'}
	at com.github.javaparser.symbolsolver.JavaSymbolSolver.resolveDeclaration(JavaSymbolSolver.java:148)
	at com.github.javaparser.ast.expr.MethodCallExpr.resolve(MethodCallExpr.java:313)

My code looks like this:
[...]
CombinedTypeSolver combinedTypeSolver = new CombinedTypeSolver();
combinedTypeSolver.add(new ReflectionTypeSolver(false));
combinedTypeSolver.add(new JavaParserTypeSolver(new File("/path/to/my/sources")));

JavaSymbolSolver symbolSolver = new JavaSymbolSolver(combinedTypeSolver);
JavaParser.getStaticConfiguration().setSymbolResolver(symbolSolver);

CompilationUnit cu = JavaParser.parse("public class X { java.util.List x() { return new java.util.ArrayList() { public int size() { return super.size(); } }; } }");
cu.accept(new MethodVisitor(), null);
[...]

public class MethodVisitor extends VoidVisitorAdapter<Void> {
    @Override
    public void visit(MethodCallExpr n, Void arg) {
        ResolvedMethodDeclaration rmd = n.asMethodCallExpr().resolve();
        super.visit(n, arg);
    }
}

Is this a bug, or did I something wrong?
Maarten

Closing comment (2018-12-10T16:35:41Z): This could be related to #1949.
Repository: javaparser/javaparser

Issue #1743: ConditionalExpr resolves to wrong type
Created: 2018-08-13T20:52:31Z
The type solver always resolves conditional expressions to the type of the then part, which makes e.g. s == null ? null  : s.toString() surprisingly being resolved to the null type instead of String.

Duplicate issue #2361: Symbol Solver is missing type promotion in conditional expressions
Created: 2019-09-15T10:22:38Z
The determination of the the result of conditional expression
(cond ? if_true_exp : if_false_exp)
is defined in Sect 15.25 of Java SE 8). Symbol Solver fails to determine the resulting type correctly in case when expressions type in branches are not of the same type.
For instance, the resulting type of:
1 < 2 ? 1f : 1d
is double, as 1f must be promoted to double.
Java Parser Version: 3.14.13
If we try to resolveObjectCreationExpr for the following code
public class Test
{
   public class InnerClass
   {
       public InnerClass(float f) {}
       public InnerClass(double d) {}
   }
    
   public Test() {
     new InnerClass(1 < 2 ? 1f : 1d); 
   }
}
with the following code (codeSource is String with the above code)
CombinedTypeSolver combinedSolver = new CombinedTypeSolver(new ReflectionTypeSolver());	    

ParserConfiguration pc = new ParserConfiguration()
    	                         .setSymbolResolver(new JavaSymbolSolver(combinedSolver))
    	                         .setLanguageLevel(LanguageLevel.JAVA_8);			

StaticJavaParser.setConfiguration(pc);

new VoidVisitorAdapter<Object>() {
    @Override
    public void visit(ObjectCreationExpr exp, Object arg) {
        System.out.println(exp.resolve().getSignature());
    }            
}.visit(StaticJavaParser.parse(codeSource), null);
constructor is resolved to InnerClass(float) instead of InnerClass(double).

Closing comment (2021-08-23T06:14:02Z): This issue is related to #1743 . This is resolved since Dec 2020.
Repository: javaparser/javaparser

Issue #4016: Failed to parse variable with name "sealed"
Created: 2023-04-29T19:55:29Z
Since #3997 JavaParser will throw a parsing error when a variable with name "sealed" is parsed.
Can be reproduced with
StaticJavaParser.parseVariableDeclarationExpr("private boolean sealed;");
which results in
Exception in thread "main" com.github.javaparser.ParseProblemException: Encountered unexpected token: "sealed" "sealed"
    at line 1, column 17.

Was expecting one of:

    "enum"
    "exports"
    "module"
    "open"
    "opens"
    "provides"
    "record"
    "requires"
    "strictfp"
    "to"
    "transitive"
    "uses"
    "with"
    "yield"
    <IDENTIFIER>

I believe that permits and sealed is missing from the grammar of an Identifier in java.jj,since these are only introduced as keywords in Java 17 and therefore is valid in versions prior:
         // Make sure the module info keywords don't interfere with normal Java parsing by matching them as normal identifiers.
         <MODULE> | <REQUIRES> | <TO> | <WITH> | <OPEN> | <OPENS> | <USES> | <EXPORTS> | <PROVIDES> | <TRANSITIVE> |
         // Make sure older Java versions parse
-        <ENUM> | <STRICTFP> | <YIELD> | <RECORD> |
+        <ENUM> | <STRICTFP> | <YIELD> | <RECORD> | <PERMITS> | <SEALED> |
         // An actual plain old identifier
         <IDENTIFIER>
     ) { ret = token.image; setTokenKind(IDENTIFIER);}

Duplicate issue #4018: Parsing then visiting transform to an empty method body from 3.25.3
Created: 2023-05-04T01:09:34Z
From version 3.25.3 (til 3.25.2 it's fine)
Before parsing and manipulating sources the method is:
    public void setThrottledRequests(int value)
    {
        int permits = _passes == null ? 0 : _passes.availablePermits();
        _passes = new Semaphore((value - _throttledRequests + permits), true);
        _throttledRequests = value;
    }

After parsing and doing some manipulation the body is now:
    public void setThrottledRequests(int value)
    {

    }

This can be reproduce with the following steps:
git clone https://github.com/jetty-project/jetty-modify-sources-maven-plugin
cd jetty-modify-sources-maven-plugin
mvn clean test -Djavaparser.version=3.25.3

I did the git bisect game and found this commit as culprit 25b12b3

Closing comment (2023-05-04T16:48:24Z): Probably related to #4016
Repository: jazzband/djangorestframework-simplejwt

Issue #779: Add Security Warning while using `for_user` method
Created: 2024-02-08T17:28:22Z
Add security warning in for_user documentation to avoid introducing vulnerability in other applications.
Security Warning: validate whether user is active or not before generating token for the user. This will only create token for the user, it doesn't perform user validation whether user is active or not.

Duplicate issue #805: Reported vulnerability in 5.3.1
Created: 2024-05-06T12:58:52Z
Safety vulnerability scanner reports the following vulnerability in the latest version of this package:
-> Vulnerability found in djangorestframework-simplejwt version 5.3.1
   Vulnerability ID: 66963
   Affected spec: <=5.3.1
   ADVISORY: djangorestframework-simplejwt version 5.3.1 and before is
   vulnerable to information disclosure. A user can access web application...
   CVE-2024-22513
   For more information, please visit
   https://data.safetycli.com/v/66963/f17
 Scan was completed. 1 vulnerability was found.

Closing comment (2025-02-26T20:12:04Z): as mentioned - duplicate of #779 so closing this
Repository: jazzband/djangorestframework-simplejwt

Issue #784: Library does not automatically verify that the token hasn't been tampered with
Created: 2024-02-12T08:37:09Z
I have to report a (quite big) issue/vulnerability, assuming it's not misconfiguration on our end 😅
It seems that the library doesn't do verification of the JWT's signature. I tampered with one token's payload and used it as my Bearer token (without correctly regenerating the signature, I just left it the same as it was before) and the library validated my forged token. I even tried having different SIGNING_KEY and VERIFYING_KEY and the Django application worked flawlessly, so there definitely is no verification of the validity of the token.
I fixed this by overriding our authentication class with a custom-made one that inherits JWTCookieAuthentication
import jwt
from dj_rest_auth.app_settings import api_settings
from dj_rest_auth.jwt_auth import JWTCookieAuthentication
from django.conf import settings
from rest_framework.exceptions import AuthenticationFailed
from rest_framework_simplejwt import settings as jwt_settings


class FixedJWTCookieAuthentication(JWTCookieAuthentication):
    def authenticate(self, request):
        cookie_name = api_settings.JWT_AUTH_COOKIE
        header = self.get_header(request)
        if header is None:
            if cookie_name:
                raw_token = request.COOKIES.get(cookie_name)
                # True at your own risk
                if api_settings.JWT_AUTH_COOKIE_ENFORCE_CSRF_ON_UNAUTHENTICATED:
                    self.enforce_csrf(request)
                elif raw_token is not None and api_settings.JWT_AUTH_COOKIE_USE_CSRF:
                    self.enforce_csrf(request)
            else:
                return None
        else:
            raw_token = self.get_raw_token(header)

        if raw_token is None:
            return None

        verifying_key = jwt_settings.api_settings.user_settings.get("VERIFYING_KEY")
        if verifying_key is None:
            verifying_key = jwt_settings.api_settings.user_settings.get("SIGNING_KEY")
        if verifying_key is None:
            verifying_key = settings.SECRET_KEY

        try:
            validated_token = jwt.decode(raw_token, verifying_key, algorithms=["HS256"])
        except jwt.InvalidSignatureError:
            raise AuthenticationFailed("Invalid JWT signature")
        except jwt.ExpiredSignatureError:
            raise AuthenticationFailed("JWT signature has expired")
        except jwt.DecodeError:
            raise AuthenticationFailed("Error decoding JWT")
        except:  # noqa E722
            raise AuthenticationFailed("Invalid JWT token")

        return self.get_user(validated_token), validated_token

Duplicate issue #792: CVE-2024-22513
Created: 2024-03-19T15:03:57Z
Hi,
Flagging here a CVE released 3 days ago triggered by dependabot: GHSA-5vcc-86wm-547q

Closing comment (2024-03-19T15:06:07Z): Ha, duplicate of #784
Repository: jazzband/djangorestframework-simplejwt

Issue #794: `Token` subclass' `for_user` method is typed to return a `Token`
Created: 2024-04-03T23:57:31Z
The example from the doc itself is a good minimal reproduction of this issue:
https://django-rest-framework-simplejwt.readthedocs.io/en/latest/creating_tokens_manually.html
from django.contrib.auth.models import AbstractBaseUser
from rest_framework_simplejwt.tokens import RefreshToken


def get_tokens_for_user(user: AbstractBaseUser):
    refresh = RefreshToken.for_user(user)

    return {
        "refresh": str(refresh),
        "access": str(refresh.access_token),  # "Token" has no attribute "access_token" Mypy [attr-defined]
    }
RefreshToken.for_user(user)'s return type, as seen by type-checkers (mypy/pyright) is Token instead of RefreshToken.
This is caused by BlacklistMixin.for_user being typed to return a Token, where I believe it should probably return Self (from typing_extensions import Self)
CC @theo-auffeuvre & @NicolasDontigny for visibility

Duplicate issue #821: Incorrect typing for refresh token.
Created: 2024-08-16T00:21:43Z
Let say we have code block like this:
def create_token(profile_id: ProfileId) -> Token:
    user = User.objects.get(profiletable=profile_id)
    refresh = RefreshToken.for_user(user)
    return str(refresh.access_token)
That would produce error in mypy:
venv/lib/python3.12/site-packages/web/repositories/token.py: note: In function "create_token":
venv/lib/python3.12/site-packages/web/repositories/token.py:13:16: error: "Token" has no attribute "access_token" 
[attr-defined]
        return str(refresh.access_token)
                   ^~~~~~~~~~~~~~~~~~~~

Token.for_user class method returns cls() which allows subclasses returns it's own instances. But annotations says it would always be a Token.
Maybe typing.Self would work?

Closing comment (2024-09-11T00:36:53Z): And duplicates #794.
Repository: jazzband/djangorestframework-simplejwt

Issue #201: Why I can't delete OutstandingToken via django-admin
Created: 2020-01-15T12:27:00Z
I'm using Blacklist app and if I try to delete one of my users I get the error message
Deleting the selected user would result in deleting related objects, but your account doesn't have permission to delete the folowing types of objects: - outstanding token

The OutstandingTokenAdmin's has_delete_permission method always returns False. So even admin user with superuser status can't delete this.
Is there a reason to forbid deletion of OutstandingTokens?
It's strange but I'm new to all this jwt stuff and maybe I miss something.

Duplicate issue #232: Cannot delete users
Created: 2020-04-08T19:52:55Z
Deleting the selected users would result in deleting related objects, but your account doesn't have permission to delete the following types of objects:
outstanding token

Closing comment (2020-04-10T13:16:57Z): Duplicates #201. I'll take a look.
Repository: jazzband/djangorestframework-simplejwt

Issue #313: Add support for python 3.9
Created: 2020-10-06T11:21:57Z
Version 4.4.0 has python_requires='>=3.6,<3.9'. The upper bound was lifted in 953a6bf but remains unreleased

Duplicate issue #318: Can't install djangorestframework-simplejwt==4.4.0 For python 3.9
Created: 2020-10-14T14:53:29Z
Hi,
I can't pip install djangorestframework-simplejwt==4.4.0 on a virtual environment that runs on python 3.9

Closing comment (2020-10-14T15:31:10Z): Duplicate #313
Repository: jazzband/djangorestframework-simplejwt

Issue #71: Allow httpOnly cookie storage
Created: 2019-01-26T20:44:52Z
Similar to #23 but with a different motivation.
To protect against XSS, I would like the option to store the JWT in an HttpOnly cookie. django-rest-framework-jwt has this feature as an optional setting but that project I believe is abandoned and also has a vulnerability due to preventing the usage of django's CSRF token (see: jpadilla/django-rest-framework-jwt#434). Combining an HttpOnly cookie with CSRF token would be a pretty rock solid solution.
References:
https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage
https://stackoverflow.com/questions/44133536/is-it-safe-to-store-a-jwt-in-localstorage-with-reactjs

Duplicate issue #748: Cookie
Created: 2023-08-29T15:51:50Z
Please add support set_cookie()
thx

Closing comment (2023-12-04T06:57:57Z): Duplicate #71
Repository: jazzband/djangorestframework-simplejwt

Issue #815: Improper Privilege Management in djangorestframework-simplejwt <= 5.3.1
Created: 2024-07-12T16:16:48Z
Improper Privilege Management Vulnerability
Description:
I recently came across a Dependabot alert on GitHub regarding an improper privilege management vulnerability in djangorestframework-simplejwt. I attempted to address this by upgrading to the latest version, only to discover that version 5.3.1 is the most recent release and it remains vulnerable.
The vulnerability allows a user to access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.
Affected Versions:

djangorestframework-simplejwt (pip) <= 5.3.1

Patched Version:

None

Steps to Reproduce:

Create a user account and log in.
Disable the user account in the application.
Attempt to access resources using the previously issued JWT token.

Expected Behavior:
The disabled user should not be able to access any resources.
Actual Behavior:
The disabled user can still access resources due to missing validation checks.
Possible Solution:
Implement validation checks in the for_user method to ensure that disabled users cannot access resources.
Reference
I was initially alerted to the issue by a dependency bot. Upon attempting to update the package, I discovered there was no updated version available on PyPI. I then checked the repository for recent updates, but none were available.
This issue is critical as it can lead to unauthorized access to resources by users who should no longer have access. Please prioritize this fix and release an updated version as soon as possible.

Duplicate issue #824: Vulnerability found in dependency : CVE-2024-22513 8.8
Created: 2024-08-29T12:38:47Z
Improper Privilege Management vulnerability with High severity found
https://github.com/dmdhrumilmistry/CVEs/tree/main/CVE-2024-22513

Closing comment (2024-08-31T13:18:33Z): Looks like a duplicate of #815
Repository: jazzband/djangorestframework-simplejwt

Issue #170: Add support other JWT algorithm
Created: 2019-10-28T15:16:25Z
For some reason there is no support for es(256-512) algorithm.
But it seems pyjwt includes them.
What are pitfals of the implementing it?
Thanks :)

Duplicate issue #277: Support for Elliptic Curve algorithms
Created: 2020-07-20T07:57:57Z
Hi,
is there a good reason, why the ES* algorithms aren't in the list of available algorithms (tokens.py). They are creating significantly smaller JWTs compared to the RS* algorithms. A quick test showed me that just adding them as "allowed" works out of the box.
I am happy to create a pull request in case there is no technical/security reason why this shouldn't be supported in the first place.

Closing comment (2020-07-20T17:04:22Z): Duplicate #170
Repository: jazzband/djangorestframework-simplejwt

Issue #71: Allow httpOnly cookie storage
Created: 2019-01-26T20:44:52Z
Similar to #23 but with a different motivation.
To protect against XSS, I would like the option to store the JWT in an HttpOnly cookie. django-rest-framework-jwt has this feature as an optional setting but that project I believe is abandoned and also has a vulnerability due to preventing the usage of django's CSRF token (see: jpadilla/django-rest-framework-jwt#434). Combining an HttpOnly cookie with CSRF token would be a pretty rock solid solution.
References:
https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage
https://stackoverflow.com/questions/44133536/is-it-safe-to-store-a-jwt-in-localstorage-with-reactjs

Duplicate issue #324: Support for http Only Cookie for the refresh token
Created: 2020-11-03T11:03:42Z
It would be nice if we could configure this framework in order to store the refresh_token as a httpOnly Cookie in the browser. This would be more secure against XSS attacks.

Closing comment (2020-11-03T20:51:04Z): Duplicate #71
There's discussion on why it's basically unnecessary to have a refresh token if you're doing this in the browser simply because you're really just making a stateful session and that's it.
Repository: jazzband/djangorestframework-simplejwt

Issue #71: Allow httpOnly cookie storage
Created: 2019-01-26T20:44:52Z
Similar to #23 but with a different motivation.
To protect against XSS, I would like the option to store the JWT in an HttpOnly cookie. django-rest-framework-jwt has this feature as an optional setting but that project I believe is abandoned and also has a vulnerability due to preventing the usage of django's CSRF token (see: jpadilla/django-rest-framework-jwt#434). Combining an HttpOnly cookie with CSRF token would be a pretty rock solid solution.
References:
https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage
https://stackoverflow.com/questions/44133536/is-it-safe-to-store-a-jwt-in-localstorage-with-reactjs

Duplicate issue #289: Storing the tokens in cookie (httponly)?
Created: 2020-08-17T05:07:56Z
How do I store the tokens in httponly cookie? I heard storing the tokens in httponly cookie is somewhat secure.
In that context, I don't want to run TokenObtainPairView as view, but I want to get the tokens and set cookie inside a view in django. I hope my question makes sense.

Closing comment (2020-08-18T16:40:05Z): Duplicate #71. We're working on a PR at #71 that'll solve your problem.
Repository: jely2002/youtube-dl-gui

Issue #49: Option to download via external downloaders like Aria2c
Created: 2021-04-29T15:58:51Z
Is your feature request related to a problem? Please describe.
Well, who doesn't know about the opensource downloader Aria2c. Adding an option to download via external downloaders like Aria2c would be a great option.
Describe the solution you'd like
The GUI could interact with the JSON RPC for aria2c or it could download them without the RPC from a command.
And congratulation for such a great tool.😎

Duplicate issue #117: Download does not reach maximum speed and freezes during the process
Created: 2021-06-24T20:01:30Z
Download does not reach maximum speed and freezes during the process.
Below is a video I made demonstrating the problem:
YouTube DL GUI - Speed Test
Below is an image showing that my internet is stable:

OS: Windows 10 64-bit
Version: 2.2.1

Closing comment (2021-06-28T20:25:25Z): This has to do with youtube limiting your speed. Not per se with my application. However it could be fixed by using an external download tool such as Aria2C so it can set up multiple connections. Because of this I will be marking this a duplicate of #49.
Repository: jely2002/youtube-dl-gui

Issue #236: ERROR: Postprocessing Stream #1:0
Created: 2021-11-14T12:41:48Z
"Error! Unhandled error." Everytime you try to download a mp4, mkv, mp3, etc.
To Reproduce
Steps to reproduce the behavior:

Find a video you want to download
paste the link in Open video downloader
click on download, and wait.
after a while you get the error i described before, doesn't matter which setting or extension you use.

Expected behavior
I expect the video to download like normal without any issues
Screenshots
If applicable, add screenshots to help explain your problem.

Additional info (please complete the following information):

OS: Windows 11
Application version 2.4.0
Application type standalone installer

Additional context
I think it has something to do with the new Youtube-dl fork.

Duplicate issue #238: MP4 File Format output FAIL
Created: 2021-11-14T19:23:35Z
Describe the bug
When I try download video in MP4 format, download FAIL
To Reproduce
Steps to reproduce the behavior:

Go to 'Settings - Output Format - MP4'
Click on 'Download Any Video'
See error ERROR: Postprocessing: Stream # 1:0 -> # 0:1 (copy)

Screenshots
https://postimg.cc/hJGtnDPg
Additional info (please complete the following information):

OS: Windows 10 x64 (all updates)
Application version 2.4.0
Application type - installer

Additional context
MKV format works good

Closing comment (2021-11-15T15:13:08Z): This is a duplicate of #236. Closing as such.
Repository: jely2002/youtube-dl-gui

Issue #160: Show file in folder/Open file failing to function with some default generated filenames.
Created: 2021-08-28T00:55:32Z
Describe the bug
downloaded videos with titles that contain some emoji/missing fonts can cause the Show File in Folder and Open file buttons to fail in 2.3.0 if windows cannot properly display the emoji and replaces them with the missing font box. an example of one of the emoji: 🌿
These functioned correctly in 2.2.1 Portable even if windows could not display the emoji or font(ie replaced it with the missing font box)
To Reproduce
Steps to reproduce the behavior:

download the following video with 2.3.0 Portable using default Title or Title+quality filename: https://www.youtube.com/watch?v=le9AAt8B5Gc
Click Show File in Folder
Nothing will happen
Click Open file
See Windows cannot find path error, the filepath shown will not have either the emoji or the missing font box icon.

Expected behavior
Show file location should open the folder the file was saved in, Open file should open the file.
Additional info (please complete the following information):
2.3.0 Portable

Additional context
I tested this in both 2.3.0Portable and 2.2.1Portable, 2.2.1 correctly was able to open both the file and the file location, 2.3.0 failed both. Both successfully download the file.

Duplicate issue #163: Application can't open downloaded videos with Korean names.
Created: 2021-08-29T19:52:55Z
Description of the bug
Button "Show in the folder" doing nothing. Button "Open file" giving only error "Windows cannot find "filename.webm""
The problem of the app is that it's downloading videos with partially Korean and English in names and save them with full and correct name but when it trying to open them it searching only for English part of the name (without Korean part of the name, just deleting it from search request) and can't find them.
Screenshots
First screenshot showing the correct downloaded file name in forder:

Second screenshot showing the incorrect file name that app is searching for and can't find in folder (it just searching for English part of the name ignoring the Korean part of the name):

Additional info

Source video with Korean name to check the bug: https://www.youtube.com/watch?v=gkkkGM3BMRY
OS: Windows 10 (English)
Application version v2.3.0
Application type: Installer

Closing comment (2021-08-29T20:48:41Z): This is a duplicate of #160. It has been fixed, and it will be released on the next bugfix update.
I can confirm that opening the video you mentioned works with the fix.
Repository: jely2002/youtube-dl-gui

Issue #225: Limited download speed?
Created: 2021-10-13T16:03:04Z
Hi,
For some reason, I'm only getting 58kbps download speed through Open Video Downloader even though multiple applications are closed and I'm getting 285mbps through speedtest. I've updated the client and i'm still facing the same issue.
Thanks.

Duplicate issue #228: Very slow downloading
Created: 2021-10-21T19:32:22Z
Describe the bug
Video Downloading is very slow, never happened before.
To Reproduce
Steps to reproduce the behavior:

Open Open Video downloader
Paste any video link
Click Download
The download will be very slow, shown in kb/s (doesn't even reach 1 Megabit/s)

Expected behavior
Downloading Should be faster than what it is
Screenshots
Additional info (please complete the following information):

OS: Windows 10, latest version
Application version: Latest (2.3.1 for github, 2.2.2 for MS Store)
Application type: Applies to all of them.

Closing comment (2021-10-22T12:52:37Z): I'm currently working on a switch to YT-DLP which should fix this annoying throttling by YouTube. Stay tuned!
Duplicate of #225, #147. I will be closing this issue as it is a duplicate. Progress can be followed in #225.
Repository: jely2002/youtube-dl-gui

Issue #161: Add the ability to cut download only a cut of the video
Created: 2021-08-28T19:03:41Z
It would be interesting to have the possibility to enter the period of time you want for a given video. including the possibility of loading the video into a player and marking the cut locations and making a margin of the parts you want to keep from a video outputting a single video cut at the end.

Duplicate issue #253: Let user cut and download specific part of the video
Created: 2021-12-03T20:24:13Z
I'd like to crop the video to get only a specified range of it.

For example, I input a video with length of 2 minutes and 30 seconds. Lets say I only want to get the video from the minute 1 to the minute 2. Would be nice to let us to crop it, so I don't download the start of it and neither the last part of it.

Thanks and awesome job!

Closing comment (2022-02-02T14:54:06Z): Duplicate of #161.
Repository: jely2002/youtube-dl-gui

Issue #243: Error! Unhandled error (execa).
Created: 2021-11-20T01:17:38Z
Describe the bug
After pasting a video link, and clicking download, the progress bar turns red immediately and displays: Error! Unhandled error (execa). Was working correctly on previous verison 2.3.1
To Reproduce
Steps to reproduce the behavior:

Paste video link
Click on +

Expected behavior
Video should be downloaded
Additional info (please complete the following information):

OS: OS X El Capitan 10.11.6
Application version 2.4.0
Application type dmg in Applications folder

Additional context
{
"shortMessage": "Command failed with exit code 127: /Applications/Open Video Downloader.app/Contents/Resources/app.asar.unpacked/binaries/yt-dlp-unix -J --flat-playlist --no-cache-dir --ignore-config --user-agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36 --no-check-certificate --yes-playlist undefined",
"command": "/Applications/Open Video Downloader.app/Contents/Resources/app.asar.unpacked/binaries/yt-dlp-unix -J --flat-playlist --no-cache-dir --ignore-config --user-agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36 --no-check-certificate --yes-playlist undefined",
"exitCode": 127,
"stdout": "",
"stderr": "env: python3: No such file or directory",
"failed": true,
"timedOut": false,
"isCanceled": false,
"killed": false
}

Duplicate issue #363: Error! Unhandled error (execa)
Created: 2022-05-21T18:25:58Z
Hi, I'm just trying to download a video, but I get this error. What is happening?
Version: v2.4.0, portable, for Windows.
I also got this error several times, I link the issue - #362

Closing comment (2022-06-18T21:28:35Z): Duplicates #243
Repository: jely2002/youtube-dl-gui

Issue #243: Error! Unhandled error (execa).
Created: 2021-11-20T01:17:38Z
Describe the bug
After pasting a video link, and clicking download, the progress bar turns red immediately and displays: Error! Unhandled error (execa). Was working correctly on previous verison 2.3.1
To Reproduce
Steps to reproduce the behavior:

Paste video link
Click on +

Expected behavior
Video should be downloaded
Additional info (please complete the following information):

OS: OS X El Capitan 10.11.6
Application version 2.4.0
Application type dmg in Applications folder

Additional context
{
"shortMessage": "Command failed with exit code 127: /Applications/Open Video Downloader.app/Contents/Resources/app.asar.unpacked/binaries/yt-dlp-unix -J --flat-playlist --no-cache-dir --ignore-config --user-agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36 --no-check-certificate --yes-playlist undefined",
"command": "/Applications/Open Video Downloader.app/Contents/Resources/app.asar.unpacked/binaries/yt-dlp-unix -J --flat-playlist --no-cache-dir --ignore-config --user-agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36 --no-check-certificate --yes-playlist undefined",
"exitCode": 127,
"stdout": "",
"stderr": "env: python3: No such file or directory",
"failed": true,
"timedOut": false,
"isCanceled": false,
"killed": false
}

Duplicate issue #365: "Error! Unhandled error (execa)."
Created: 2022-05-29T14:07:51Z
Everytime I try to download something, I always get "Error! Unhandled error (execa)."
"Show full error" gives me this:

How can I solve it?

Closing comment (2022-06-18T21:28:49Z): Duplicates #243
Repository: jely2002/youtube-dl-gui

Issue #154: Offering to help with translating the project
Created: 2021-08-20T17:15:48Z
I'm willing to help translate the app to Spanish, I have been using the program for quite a long time now, and I have recommended it to friends or family that don't quite understand English so I have to keep explaining them every option.
Are there any plans on making a translation campaign? I mean, there are websites like Crowdin which support open source software, but they are not quite free software supporters, but I'm sure you could use some alternative out there. And I think a part of the community for this project would be glad to help, including me of course.
I mean if the owner of the project doesn't have any plans for this, I don't mind too much, it's just an idea for a request 😃

Duplicate issue #252: Added Chinese language support
Created: 2021-12-01T11:30:42Z
Add Chinese support, I am in China, so I hope to add Chinese UI support

Closing comment (2022-02-01T00:04:38Z): This is a duplicate of #154 and #89. Closing it as such.
Repository: jely2002/youtube-dl-gui

Issue #49: Option to download via external downloaders like Aria2c
Created: 2021-04-29T15:58:51Z
Is your feature request related to a problem? Please describe.
Well, who doesn't know about the opensource downloader Aria2c. Adding an option to download via external downloaders like Aria2c would be a great option.
Describe the solution you'd like
The GUI could interact with the JSON RPC for aria2c or it could download them without the RPC from a command.
And congratulation for such a great tool.😎

Duplicate issue #217: support aria2c
Created: 2021-10-10T05:55:23Z
youtube-dl with aria2c

45M/S
youtube-dl-gui (no aria2c)

only 3-4M/S

Closing comment (2021-10-13T09:05:36Z): Thanks for the suggestion. This is a duplicate of #49.