Logging to logging.debug() will create a root logger handler if none existed, which can result in logging from later application code using the pyjwkest library unintentionally being activated. Using logger.debug() instead.

Author: levkowetz

src/jwkest/jwt.py

@@ -82,7 +82,7 @@ def pack(self, parts=None, headers=None):
             else:
                 headers = {'alg': 'none'}
 
-        logging.debug('JWT header: {}'.format(headers))
+        logger.debug('JWT header: {}'.format(headers))
 
         if not parts:
             return ".".join([a.decode() for a in self.b64part])