Changelog History
Page 1
-
v0.15.2 Changes
October 18, 2020🛠 Fixed httpx authentication bug via #283
-
v0.15.1 Changes
October 14, 2020Backward compitable fix for using JWKs in JWT, via #280.
-
v0.15 Changes
October 10, 2020🚀 This is the last release before v1.0. In this release, we added more RFCs
🔨 implementations and did some refactors for JOSE:- RFC8037: CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)
- 🖨 RFC7638: JSON Web Key (JWK) Thumbprint
🛠 We also fixed bugs for integrations:
- 🛠 Fixed support for HTTPX>=0.14.3
- ➕ Added OAuth clients of HTTPX back via #270
- 🛠 Fixed parallel token refreshes for HTTPX async OAuth 2 client
- Raise OAuthError when callback contains errors via #275
💥 Breaking Change :
- The parameter
algorithms
inJsonWebSignature
andJsonWebEncryption
are changed. Usually you don't have to care about it since you won't use it directly. 🔨 2. Whole JSON Web Key is refactored, please check JSON Web Key (JWK)
-
v0.14.3 Changes
May 18, 2020- 🛠 Fix HTTPX integration via #232 and #233.
- ➕ Add "bearer" as default token type for OAuth 2 Client.
- 0️⃣ JWS and JWE don't validate private headers by default.
- ✂ Remove
none
auth method for authorization code by default. - 👍 Allow usage of user provided
code_verifier
via #216. - ➕ Add
introspect_token
method on OAuth 2 Client via #224.
-
v0.14.2 Changes
May 06, 2020 -
v0.14.1
February 12, 2020 -
v0.14 Changes
February 11, 2020🚀 In this release, Authlib has introduced a new way to write framework integrations for clients.
🐛 Bug fixes and enhancements in this release:
- 🛠 Fix HTTPX integrations due to HTTPX breaking changes
- 🛠 Fix ES algorithms for JWS
- 👍 Allow user given nonce via #180.
- 🛠 Fix OAuth errors get_headers leak.
- 🛠 Fix code_verifier via #165.
💥 Breaking Change : drop sync OAuth clients of HTTPX.
-
v0.13 Changes
November 11, 2019🚀 This is the release that makes Authlib one more step close to v1.0. We did a huge refactor on our integrations. Authlib believes in monolithic design, it enables us to design the API to integrate with every framework in the best way. In this release, Authlib has re-organized the folder structure, moving every integration into the integrations folder. It makes Authlib to add more
integrations
easily in the future.RFC implementations and updates in this release:
- RFC7591: OAuth 2.0 Dynamic Client Registration Protocol
- RFC8628: OAuth 2.0 Device Authorization Grant
🆕 New integrations and changes in this release:
- 🔀 HTTPX OAuth 1.0 and OAuth 2.0 clients in both sync and async way
- Starlette OAuth 1.0 and OAuth 2.0 client registry
- 🚚 The experimental
authlib.client.aiohttp
has been removed
🐛 Bug fixes and enhancements in this release:
- ➕ Add custom client authentication methods for framework integrations.
- Refresh token automatically for client_credentials grant type.
- ✨ Enhancements on JOSE, specifying
alg
values easily for JWS and JWE. - ➕ Add PKCE into requests OAuth2Session and HTTPX OAuth2Client.
🗄 Deprecate Changes : find how to solve the deprecate issues via https://git.io/Jeclj
-
v0.12.1 Changes
September 12, 2019🛠 This is a bug fix version. Here are the fixes:
👍 1. ensure
client.get_allowed_scope
on every grant types- add
request.client
beforevalidate_requested_scope
- add
-
v0.12 Changes
September 03, 2019Released on Sep 3, 2019.
💥 Breaking Change : Authlib Grant system has been redesigned. If you
📚 are creating OpenID Connect providers, please read the new documentation
for OpenID Connect.⚡️ Important Update : Django OAuth 2.0 server integration is ready now.
You can create OAuth 2.0 provider and OpenID Connect 1.0 with Django
framework.🚀 RFC implementations and updates in this release:
- 🛠 RFC6749: Fixed scope validation, omit the invalid scope
- RFC7521: Added a common
AssertionClient
for the assertion framework - RFC7662: Added
IntrospectionToken
for introspection token endpoint - OpenID Connect Discover: Added discovery model based on RFC8414
🚀 Refactor and bug fixes in this release:
- 💥 Breaking Change : add
RefreshTokenGrant.revoke_old_credential
method - Rewrite lots of code for
authlib.client
, no breaking changes - 🔨 Refactor
OAuth2Request
, use explicit query and form - 🔄 Change
requests
to optional dependency - ➕ Add
AsyncAssertionClient
for aiohttp
🗄 Deprecate Changes : find how to solve the deprecate issues via https://git.io/fjPsV
Code Changes: v0.11...v0.12