./security/py-authlib, Ultimate Python library in building OAuth and OpenID Connect servers

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 1.4.1, Package name: py312-authlib-1.4.1, Maintainer: pkgsrc-users

OAuth often seems complicated and difficult-to-implement. There are several
prominent libraries for handling OAuth requests, but they all suffer from one
or both of the following:

* They predate the OAuth 1.0 spec, AKA RFC 5849.
* They predate the OAuth 2.0 spec, AKA RFC 6749.
* They assume the usage of a specific HTTP request library.

OAuthLib is a generic utility which implements the logic of OAuth without
assuming a specific HTTP request object or web framework. Use it to graft OAuth
client support onto your favorite HTTP library, or provider support onto your
favourite web framework. If you're a maintainer of such a library, write a thin
veneer on top of OAuthLib and get OAuth support for very little effort.


Required to run:
[devel/py-setuptools] [security/py-cryptography] [lang/python37]

Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 143.922 KB

Version history: (Expand)

CVS history: (Expand)


   2025-01-28 19:11:52 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-authlib: updated to 1.4.1

1.4.1

Improve garbage collection on OAuth clients.
Fix client parameters for httpx.
   2024-12-29 10:40:02 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-authlib: updated to 1.4.0

1.4.0

Fix id_token decoding when kid is null.
Support for Python 3.13.
Force login if the prompt parameter value is login.
Support for httpx 0.28,

Breaking changes:

Stop support for Python 3.8
   2024-11-11 08:29:31 by Thomas Klausner | Files touched by this commit (862) 
Log message:
py-*: remove unused tool dependency

py-setuptools includes the py-wheel functionality nowadays
   2024-08-26 16:55:44 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-authlib: updated to 1.3.2

Version 1.3.2

Prevent ever-growing session size for OAuth clients.
Revert quote client id and secret.
unquote basic auth header for authorization server.
   2024-06-07 22:54:53 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-authlib: updated to 1.3.1

1.3.1
Prevent OctKey to import ssh and PEM strings.
   2024-01-05 13:10:46 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
py-authlib: updated to 1.3.0

Version 1.3.0

Bug fixes

Restore AuthorizationServer.create_authorization_response behavior
Include leeway in validate_iat() for JWT
Fix encode_client_secret_basic
Use single key in JWK if JWS does not specify kid
Fix error when RFC9068 JWS has no scope field
Get werkzeug version using importlib

Breaking changes

RFC9068 implementation
   2023-06-27 13:44:54 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
py-authlib: updated to 1.2.1

Version 1.2.1

Released on Jun 25, 2023

Apply headers in ClientSecretJWT.sign method
Allow falsy but non-None grant uri params
Fixed authorize_redirect for Starlette v0.26.0
Removed has_client_secret method and documentation
Removed request_invalid and token_revoked remaining occurences and documentation
Fixed RFC7591 grant_types and response_types default values
   2022-12-09 12:20:02 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-authlib: updated to 1.2.0

Version 1.2.0

Not passing request.body to ResourceProtector
Use flask.g instead of _app_ctx_stack
Add headers parameter back to ClientSecretJWT
Always passing realm parameter in OAuth 1 clients
Implemented RFC7592 Dynamic Client Registration Management Protocol
Add default_timeout for requests OAuth2Session and AssertionSession.
Deprecate jwk.loads and jwk.dumps