diff --git a/pkgs/development/python-modules/python-jose/default.nix b/pkgs/development/python-modules/python-jose/default.nix
index 68b46743d35f..cb99e5fa273b 100644
--- a/pkgs/development/python-modules/python-jose/default.nix
+++ b/pkgs/development/python-modules/python-jose/default.nix
@@ -1,30 +1,29 @@
 { stdenv, buildPythonPackage, fetchFromGitHub
-, future, six, ecdsa, pycryptodome, pytest, cryptography
+, six, ecdsa, rsa, future, pytest, cryptography, pycryptodome
 }:
 
 buildPythonPackage rec {
   pname = "python-jose";
-  version = "2.0.2";
+  version = "3.0.0";
 
   # no tests in PyPI tarball
   src = fetchFromGitHub {
     owner = "mpdavis";
     repo = "python-jose";
-    # 2.0.2 not tagged on GitHub
-    # see https://github.com/mpdavis/python-jose/issues/86
-    rev = "28cc6719eceb89129eed59c25f7bdac015665bdd";
-    sha256 = "03wkq2rszy0rzy5gygsh4s7i6ls8zflgbcvxnflvmh7nis7002fp";
+    rev = version;
+    sha256 = "1dq8v87abqxv07wi403ywjk9jg1da125fviycqzki48cjxx0dhwj";
   };
 
   checkInputs = [
     pytest
-    cryptography # optional dependency, but needed in tests
+    # optional dependencies, but needed in tests
+    cryptography pycryptodome
   ];
   checkPhase = ''
     py.test
   '';
 
-  propagatedBuildInputs = [ future six ecdsa pycryptodome ];
+  propagatedBuildInputs = [ six ecdsa rsa future ];
 
   meta = with stdenv.lib; {
     homepage = https://github.com/mpdavis/python-jose;