« Changelog History


OAuthLib v3.2.1 Release Notes

Release Date: 2022-09-09 // 7 months ago

  • OAuth2.0 Provider:

    • 📇 #803: Metadata endpoint support of non-HTTPS
    • CVE-2022-36087

    OAuth1.0:

    • 📜 #818: Allow IPv6 being parsed by signature

    General:

    • 👌 Improved and fixed documentation warnings.
    • 💄 Cosmetic changes based on isort

Previous changes from v3.2.0

  • OAuth2.0 Client:

    • 🌐 #795: Add Device Authorization Flow for Web Application
    • 👍 #786: Add PKCE support for Client
    • #783: Fallback to none in case of wrong expires_at format.

    OAuth2.0 Provider:

    • 📇 #790: Add support for CORS to metadata endpoint.
    • 👍 #791: Add support for CORS to token endpoint.
    • 🚚 #787: Remove comma after Bearer in WWW-Authenticate

    OAuth2.0 Provider - OIDC:

    • #755: Call save_token in Hybrid code flow
    • #751: OIDC add support of refreshing ID Tokens with refresh_id_token
    • #751: The RefreshTokenGrant modifiers now take the same arguments as the AuthorizationCodeGrant modifiers (token, token_handler, request).

    General:

    • Added Python 3.9, 3.10, 3.11
    • Improve Travis & Coverage