Skip to content

Releases: guillp/requests_oauth2client

v1.8.0

22 Dec 20:21
@guillp guillp
v1.8.0
0bfd3b2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.8.0 Latest
Latest

What's Changed

Bug fixes

  • Refactor and enhance Serializers by @guillp in #196
  • Fix duplicate client_id body param in Pushed Authorization Requests by @haakontk in #220
  • Typo fix pool -> poll by @saper in #173
  • Fix acr_values handling in AuthorizationRequest and tests #212 by @guillp in #216
  • Pass extra positional args from tox to pytest by @saper in #172
  • linting fixes + deps update by @guillp in #192

Deps upgrades

New Contributors

Full Changelog: v1.7.0...v1.8.0

Contributors

saper, guillp, and 2 other contributors
Assets 3
Loading

v1.7.0

28 Mar 13:10
@guillp guillp
v1.7.0
b0114ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.7.0

What's Changed

  • Support for DPoP by @guillp in #75
  • Support for AS and RS provided DPoP nonces by @guillp in #92
  • Allow using custom ports in endpoints without using testing=True, as discussed in #55 by @guillp in #74
  • Support pushed_authorization_request_endpoint in from_discovery_document by @rcombs in #90
  • Add cookies and headers parameters to ApiClient.__init__() by @guillp in #110
  • Fix FlaskOAuth2ClientCredentialsAuth so that it supports the token kwarg by @snarfed in #126
  • Add DPoP key support to AuthorizationRequestSerializer (#119) by @snarfed in #120

New Contributors

Full Changelog: v1.6.0...v1.7.0

Contributors

snarfed, rcombs, and guillp
Loading

v1.6.0

05 Sep 19:49
@guillp guillp
v1.6.0
4962599
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.6.0

This release mostly focuses on polishing and does not introduce any major feature.
It comes with quite a few potentially breaking changes.
Next step will be to add support for DPoP.

BREAKING CHANGES

  • Removed the BearerAuth class. You can use a BearerToken directly as replacement.
  • parameter bearer_token_class to OAuth2Client is renamed to token_class, if a custom token class is used.
  • parameter url in ApiClient methods is now renamed to `path, since it only accepts a relative path. It was not meant to be used as kwargs anyway and is the 1st positional parameter, so chances are that it will not require any code change.
  • class TokenEndpointPoolingJob has been renamed to BaseTokenEndpointPoolingJob.
  • class ClientAssertionAuthenticationMethod has been renamed to BaseClientAssertionAuthenticationMethod.
  • renamed some exceptions:
    • MismatchingAcr to MismatchingIdTokenAcr
    • MismatchingAudience to MismatchingIdTokenAudience
    • MismatchingAzp to MismatchingIdTokenAzp
    • MismatchingIssuer to MismatchingIdTokenIssuer
    • MismatchingNonce to MismatchingIdTokenNonce
  • Most classes have been converted to attrs.frozen classes. This should not change their behaviors, but their attributes cannot be modified after creation anymore (which was unsupported anyway).
  • renamed GrantType enum to GrantTypes
  • renamed PkceUtils.code_verifier_re to code_verifier_pattern
  • expires_at is now rounded down to the exact second (with 0 microseconds)
  • expires_in is now rounded up to the next second

What Changed

  • enable ALL ruff rules, implement fixes
  • added authorization header class var in BearerToken, for #70
  • introduced many custom exceptions, with better error messages and context
  • introduced Endpoints, ResponseTypes and CodeChallengeMethods enums
  • convert client authentication handlers to attrs classes
  • convert requests auth handlers to attrs classes
  • dependencies updated
  • tests updated
  • reviewed some docstrings
  • tests now have 100% code coverage
  • BearerToken.validate_id_token() now accepts a leeway for the expiration date and the auth_time validation

Pull Requests

Full Changelog: v1.5.3...v1.6.0

Contributors

guillp and dependabot
Loading

v1.5.3

26 Apr 11:17
@guillp guillp
v1.5.3
39f32d5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.5.3

What's Changed

Full Changelog: v1.5.2...v1.5.3

Contributors

guillp
Loading

v1.5.2

15 Apr 12:42
@guillp guillp
v1.5.2
866578e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.5.2

What's Changed

Full Changelog: v1.5.1...v1.5.2

Contributors

guillp
Loading

v1.5.1

12 Mar 10:10
@guillp guillp
v1.5.1
fa1e17f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.5.1

What's Changed

Full Changelog: v1.5.0...v1.5.1

Contributors

guillp
Loading

v1.5.0

11 Mar 20:58
@guillp guillp
v1.5.0
def79cc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.5.0

What's Changed

  • a lot of code refactoring, using attrs.frozen classes @guillp in #41
  • Fix expires_in field as str, update tests (fixes #26) by @gerarar in #27
  • include an Accept: application/json header on all backend requests (#28) by @guillp in #30
  • Fix incorrect jwks_uri validation in OAuth2 client (Fixes #34) by @mtr in #35
  • add ApiClient.auth to access the currently configured Auth Scheme for or an ApiClient by @guillp in #38
  • add @OverRide decorators to Auth Handlers methods by @guillp in #39
  • enforce endpoint uri validation by @guillp in #46 and #48
  • deps update by @guillp in #49

Breaking changes:

  • Endpoint urls passed to OAuth2Client are now validated (must use https, no custom port, must include a path, no fragment). Pass testing=True to disable those checks (might be useful for debugging an AS).
  • ApiClient now requires a root url and will never send requests outside of this root url

New Contributors

Full Changelog: v1.3.0...v1.5.0

Contributors

mtr, guillp, and 2 other contributors
Loading

v1.3.0

22 Aug 09:33
@guillp guillp
v1.3.0
9df9b0d
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.3.0

What's Changed

  • Fix token expiration leeway which was reversed (fixes #22) by @amacleay-cohere in #23
  • implement expiration leeway in Bearer Token based auth handlers, #18 by @guillp in #20
  • switch to pytest-freezer by @guillp in #21
  • add OAuth2ResourceOwnerPasswordAuth for #19 by @guillp in #24
  • use pyupgrade and various housekeeping changes by @guillp in #25

New Contributors

  • @amacleay-cohere who noticed and fixed the expiration leeway bug. Thanks Andrew!

Full Changelog: v1.2.0...v1.3.0

Contributors

guillp and amacleay-cohere
Loading

v1.2.0

12 Jul 07:27
@guillp guillp
v1.2.0
1d4b3ed
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.2.0

What's Changed

  • Improved support for the Authorization Code flow and OIDC ID Token validation
  • Support for RFC9207 (issuer verification)
  • Support for the JWT grant

Full Changelog: v1.1.0...v1.2.0

Loading

v1.1.0

02 Aug 11:39
@guillp guillp
v1.1.0
c68ce4f

Choose a tag to compare

View all tags
v1.1.0

What's Changed

Full Changelog: v1.0.1...v1.1.0

Contributors

guillp
Loading