Cannot import name 'json' from 'itsdangerous'

[psrok1]

With flask==1.1.2 we get the following errors:

ImportError: cannot import name 'json' from 'itsdangerous' (/usr/local/lib/python3.8/site-packages/itsdangerous/__init__.py)

We don't pin itsdangerous and it looks to be not properly pinned in flask==1.1.2.

Originally posted by @a1ext in #532 (comment)

[a1ext]

The issue is solved via taking requirements.txt from #532 + added one more line pinning itsdangerous==2.0.1

I think it is not right way but it makes it work right now.. The better way is to fix api_key.py to not used flask's dependencies directly :3

[psrok1]

Yes, we should not rely on the itsdangerous version pinning from Flask (which pins only the minimum version)

It broke on today's itsdangerous==2.1.0 release so I think that pin to the previous version should work correctly.

https://itsdangerous.palletsprojects.com/en/2.1.x/changes/#version-2-1-0

In addition: JWT features in itsdangerous used directly in MWDB are deprecated so we plan to move to the other library that is made for that purpose e.g. PyJWT (#530). @KWMORALE is already working on that: #542 so we should get rid of direct usage.

Ok, so I'm going to pin these dependencies on master and release a backport to 2.6.1 that will fix the current version.

[psrok1]

Should be fixed in 2.6.1.