All Versions
44
Latest Version
Avg Release Cycle
78 days
Latest Release
942 days ago

Changelog History
Page 2

  • v1.4.1 Changes

    March 12, 2021

    🔄 Changed

    • 💅 #925 OAuth2TokenMiddleware converted to new style middleware, and no longer extends MiddlewareMixin.

    ✂ Removed

    • 🚚 #936 Remove support for Python 3.5

  • v1.4.0 Changes

    February 08, 2021

    ➕ Added

    • 📚 #917 Documentation improvement for Access Token expiration.
    • 🌐 #916 (for DOT contributors) Added tox -e livedocs which launches a local web server on locahost:8000 to display Sphinx documentation with live updates as you edit.
    • ✅ #891 (for DOT contributors) Added details on how best to contribute to this project.
    • 👍 #884 Added support for Python 3.9
    • #898 Added the ability to customize classes for django admin
    • 🌐 #690 Added pt-PT translations to HTML templates. This enables adding additional translations.

    🛠 Fixed

    • #906 Made token revocation not apply a limit to the select_for_update statement (impacts Oracle 12c database).
    • #903 Disable redirect_uri field length limit for AbstractGrant

  • v1.3.3 Changes

    October 16, 2020

    ➕ Added

    • ➕ added select_related in intospect view for better query performance
    • #831 Authorization token creation now can receive an expire date
    • #831 Added a method to override Grant creation
    • #825 Bump oauthlib to 3.1.0 to introduce PKCE
    • 👌 Support for Django 3.1

    🛠 Fixed

    • #847: Fix inappropriate message when response from authentication server is not OK.

    🔄 Changed

    • 🚚 few smaller improvements to remove older django version compatibility #830, #861, #862, #863

  • v1.3.2 Changes

    March 24, 2020

    🛠 Fixed

    • 🛠 Fixes: 1.3.1 inadvertently uploaded to pypi with an extra migration (0003...) from a dev branch.

  • v1.3.1 Changes

    March 23, 2020

    ➕ Added

    • 👍 #725: HTTP Basic Auth support for introspection (Fix issue #709)

    🛠 Fixed

    • ⏪ #812: Reverts #643 pass wrong request object to authenticate function.
    • 🛠 Fix concurrency issue with refresh token requests (#810)
    • 📚 #817: Reverts #734 tutorial documentation error.

  • v1.3.0 Changes

    March 02, 2020

    From the CHANGELOG:

    [1.3.0] 2020-03-02

    ➕ Added

    • ➕ Add support for Python 3.7 & 3.8
    • ➕ Add support for Django>=2.1,<3.1
    • ➕ Add requirement for oauthlib>=3.0.1
    • ➕ Add support for Proof Key for Code Exchange (PKCE, RFC 7636).
    • ➕ Add support for custom token generators (e.g. to create JWT tokens).
    • ➕ Add new OAUTH2_PROVIDER settings:
      • ACCESS_TOKEN_GENERATOR to override the default access token generator.
      • REFRESH_TOKEN_GENERATOR to override the default refresh token generator.
      • EXTRA_SERVER_KWARGS options dictionary for oauthlib's Server class.
      • PKCE_REQUIRED to require PKCE.
    • ➕ Add createapplication management command to create an application.
    • ➕ Add id in toolkit admin console applications list.
    • ➕ Add nonstandard Google support for [urn:ietf:wg:oauth:2.0:oob] redirect_uri
      for Google OAuth2 "manual copy/paste".
      N.B. this feature appears to be deprecated and replaced with methods described in
      RFC 8252: OAuth2 for Native Apps and may be deprecated and/or removed
      🚀 from a future release of Django-oauth-toolkit.

    🔄 Changed

    • 🔄 Change this change log to use Keep a Changelog format.
    • Backwards-incompatible squashed migrations:
      🚀 If you are currently on a release < 1.2.0, you will need to first install 1.2.0 then manage.py migrate before
      ⬆️ upgrading to >= 1.3.0.
    • 👌 Improved the tutorial.

    ✂ Removed

    • ✂ Remove support for Python 3.4
    • ✂ Remove support for Django<=2.0
    • ✂ Remove requirement for oauthlib<3.0

    🛠 Fixed

    • 🛠 Fix a race condition in creation of AccessToken with external oauth2 server.
    • 🛠 Fix several concurrency issues. (#638)
    • 🛠 Fix to pass request to django.contrib.auth.authenticate() (#636)
    • 👻 Fix missing oauth2_error property exception oauthlib_core.verify_request method raises exceptions in authenticate.
      (#633)
    • 🛠 Fix "django.db.utils.NotSupportedError: FOR UPDATE cannot be applied to the nullable side of an outer join" for postgresql.
      (#714)
    • 🛠 Fix to return a new refresh token during grace period rather than the recently-revoked one.
      (#702)
    • 🛠 Fix a bug in refresh token revocation.
      (#625)

  • v1.2.0 Changes

    June 03, 2018
    • Compatibility: Python 3.4 is the new minimum required version.
    • Compatibility: Django 2.0 is the new minimum required version.
    • 🆕 New feature: Added TokenMatchesOASRequirements Permissions.
    • ⚡️ validators.URIValidator has been updated to match URLValidator behaviour more closely.
    • 🚚 Moved redirect_uris validation to the application clean() method.

  • v1.1.3

    October 12, 2018

  • v1.1.2 Changes

    May 12, 2018
    • Return state with Authorization Denied error (RFC6749 section 4.1.2.1)
    • 🛠 Fix a crash with malformed base64 authentication headers
    • 🛠 Fix a crash with malformed IPv6 redirect URIs

  • v1.1.1 Changes

    May 08, 2018
    • 🚑 Critical: Django OAuth Toolkit 1.1.0 contained a migration that would revoke all existing RefreshTokens (0006_auto_20171214_2232). This release corrects the migration. If you have already ran it in production, please see the following issue for more details: https://github.com/jazzband/django-oauth-toolkit/issues/589