GitHub / authlib/authlib / commits
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 772bc72f | merge Merge pull request #919 from RavSinghChandan/fix-oauth1-insecure-transport-de... |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 11794b00 | merge Merge pull request #908 from arpitjain099/chore/device-cred-authenticated-cli... |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 13f2eb05 |
fix(client): Added client_id parameter to AssertionClient (#476)
Co-authored-by: Dmitry Supranovich <D****h@m****a>, Éloi Rivard <e****i@y****p> |
Dmitry <v****8@g****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| dde5b7a8 | fix(client): rollback | Hsiaoming Yang <m****e@l****m> | 16 days ago | |
| e4aec8c5 | fix(client): remove default= keyword from starlette client config.get calls (... |
Aliaksei Protchanka <1****a@u****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 62f41cc2 | fix(client): httpx oauth1 binary form data (#779) |
shc261392 <s****2@p****e>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 53ffa6a4 | chore: update github docs | Hsiaoming Yang <m****e@l****m> | 16 days ago | |
| 90ba5684 | fix(oauth1): correct protocol name in InsecureTransportError description | RavSinghChandan <r****5@g****m> | 17 days ago | |
| f43fcf9a | fix: normalize IPv4-mapped addresses in is_secure_transport | Éloi Rivard <e****i@y****p> | 28 days ago | |
| 6aecec9f | merge Merge pull request #916 from azmeuk/rfc7523-malformed-input |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
28 days ago | |
| b6f8a6c7 | fix: rfc7523 malformed claims handling | Éloi Rivard <e****i@y****p> | 28 days ago | |
| 4e0679ad | merge Merge commit from fork |
Éloi Rivard <e****d@n****r>
Committed by: GitHub <n****y@g****m> |
28 days ago | |
| b515f4a6 | fix: reject URIs with a userinfo component in metadata validation | Éloi Rivard <e****i@y****p> | 29 days ago | |
| 95ad1f90 | fix: use urllib and ipaddress in is_secure_transport | Éloi Rivard <e****i@y****p> | 29 days ago | |
| 2bbd66b2 | merge Merge pull request #909 from levinKaus/feature/httpx2-support |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 1795d1c9 | feat(client): fall back to httpx with a deprecation warning when httpx2 is un... | Levin <l****s@g****m> | about 1 month ago | |
| f1f7ecf2 | merge Merge remote-tracking branch 'origin/main' into feature/httpx2-support | Éloi Rivard <e****i@y****p> | about 1 month ago | |
| 956711fe | merge Merge pull request #912 from azmeuk/minversions |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| b8010194 | chore: declare lower bounds for dependencies | Éloi Rivard <e****i@y****p> | about 1 month ago | |
| 2cd6685c | fix(oauth): cast sub claim to string in RFC 7523 JWTBearerTokenGenerator | Éloi Rivard <e****i@y****p> | about 1 month ago | |
| d791632d | merge Merge pull request #911 from levinKaus/fix/rfc9068-sub-claim-type |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| aaac6e55 | fix(oauth): cast sub claim to string in JWTBearerTokenGenerator | Levin Kaus <l****s@g****m> | about 1 month ago | |
| 4200f2ce | fix(client): remove dead app kwarg handling in sync httpx clients | Levin <l****s@g****m> | about 2 months ago | |
| e1a0f76e | feat(client): use httpx2 instead of httpx | Levin <l****s@g****m> | about 2 months ago | |
| ce0598e9 |
fix(oauth): save device credential with authenticated client id
Signed-off-by: Arpit Jain <a****9@g****m> |
Arpit Jain <a****9@g****m> | about 2 months ago | |
| 5cb26721 | merge Merge pull request #897 from liudonggalaxy/Dongliu/assertion_default_jti |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| cbaede3e | merge Merge pull request #903 from mondi04/fix/jwt-bearer-token-validator-leeway |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 1c905030 | test: add test for configurable leeway in JWTBearerTokenValidator | mondi04 <2****4@u****m> | 3 months ago | |
| 287c1e38 | fix: make leeway configurable in JWTBearerTokenValidator | mondi04 <2****4@u****m> | 3 months ago | |
| 2e7224cf | merge Merge pull request #891 from liudonggalaxy/Dongliu/fix_invalid_key_id_error_h... |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| f0c12356 |
feat: add default jti claim to sign_jwt_bearer_assertion
Co-authored-by: Copilot <2****t@u****m> |
Dong <l****y@g****m> | 3 months ago | |
| bf39e2f2 | merge Merge pull request #888 from azmeuk/808-id-token |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 8e46995b | fix(oauth): Catch InvalidKeyIdError in RFC 9068 JWTBearerTokenValidator | Dong <l****y@g****m> | 3 months ago | |
| a0b76fac | chore: bump to 1.7.2 | Éloi Rivard <e****i@y****p> | 4 months ago | |
| c85c7f2b | merge Merge pull request #884 from azmeuk/852-rfc7523-key-import |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| ff8a60f7 | fix: prefer id_token_signed_response_alg client metadata to guess algs | Éloi Rivard <e****i@y****p> | 4 months ago | |
| a3b2adda | merge Merge pull request #873 from azmeuk/bcp47 |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| f2578eaa | fix: Import RSAKey in auth.py for additional key support |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| b57182cf | fix: fallback support RSAKey when client_secret is text |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 4e759029 | merge Merge branch 'main' into 852-rfc7523-key-import |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 5eb4a860 | merge Merge pull request #887 from azmeuk/883-alg |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 5633f37c | fix: allow non-recommended algorithms in ClientSecretJWT and PrivateKeyJWT | Éloi Rivard <e****i@y****p> | 4 months ago | |
| 4c8e7b38 | merge Merge pull request #886 from azmeuk/885-readme |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 23b333e4 | docs: fix the readme links | Éloi Rivard <e****i@y****p> | 4 months ago | |
| 27b474e5 | fix: RFC7523 signing with non RSA keys | Éloi Rivard <e****i@y****p> | 4 months ago | |
| b5e43586 | chore: automatically publish GH releases on tags | Éloi Rivard <e****i@y****p> | 4 months ago | |
| 485016a3 | chore: bump to 1.7.1 | Éloi Rivard <e****i@y****p> | 4 months ago | |
| c304a216 | merge Merge pull request #881 from azmeuk/880-deprecation-warnings |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 7b4ecd7c | fix: redirecting to unvalidated redirect_uri on InvalidScopeError in OIDC grants | Éloi Rivard <e****i@y****p> | 4 months ago | |
| 4165ada1 | fix: authlib.jose deprecation warning poping from _joserfc_helpers | Éloi Rivard <e****i@y****p> | 4 months ago | |
| 5d2e603e | chore: release 1.7.0 | Hsiaoming Yang <m****e@l****m> | 4 months ago | |
| 767f08bb | fix: CSRF issue with starlette client | Éloi Rivard <e****i@y****p> | 4 months ago | |
| e9aaef33 | merge Merge pull request #877 from authlib/merge/1.6 |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 3c8ec9a8 | merge Merge branch 'main' into merge/1.6 | Hsiaoming Yang <m****e@l****m> | 5 months ago | |
| ef09aebb | chore: release 1.6.10 | Hsiaoming Yang <m****e@l****m> | 5 months ago | |
| 4cf6f979 | merge Merge pull request #876 from guillett/patch-1 |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 23f67b44 | Update README.md docs.authlib.org/en/latest => docs.authlib.org/en/stable |
Thomas Guillet <t****s@p****r>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 3be08468 | fix: redirecting to unvalidated redirect_uri on UnsupportedResponseTypeError |
Éloi Rivard <e****i@y****p>
Committed by: Hsiaoming Yang <m****e@l****m> |
5 months ago | |
| 10401635 | chore: prek autoupdate | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 491209fb | merge Merge pull request #875 from azmeuk/doc |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 557f2ca4 | docs: sections overhaul | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 25d97c28 | docs: remove versionchanged indications for versions < 1.0 | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 8f34ce00 | docs: indicate that authlib.jose will be removed in 1.8 | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 9bd08564 | docs: mention rpinitiated in the readme | Éloi Rivard <e****i@y****p> | 5 months ago | |
| f59b3136 | feat: validate bcp47 language tags with a regex | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 4c821b6f | docs: changelog | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 148ed782 | merge Merge pull request #872 from azmeuk/error-extra-attribute |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 7fc90b2e | fix: don't nest InvalidTokenError extra attribute | Éloi Rivard <e****i@y****p> | 5 months ago | |
| 68e6ab3f | merge Merge pull request #865 from azmeuk/730-rfc7523-aud |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 2b450279 | merge Merge pull request #869 from nblock/flask |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 2ad83535 | docs: changelog | Éloi Rivard <e****i@y****p> | 6 months ago | |
| 7f1608ad | merge Merge pull request #867 from alex-ball/patch-1 |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| b069eb14 | fix: use the real application object for Flask | Florian Preinstorfer <s****b@n****g> | 6 months ago | |
| acf45d2a | merge Merge pull request #868 from alex-ball/patch-2 |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 29184c82 | fix(client): set user-agent when fetching server metadata | Alex Ball <a****l@u****m> | 6 months ago | |
| 2e30103d | test: add user-agent tests when fetching OpenID metadata | Alex Ball <a****l@u****m> | 6 months ago | |
| 0ccbcdad | fix: correct syntax of tox.requires in tox.ini | Alex Ball <a****l@u****m> | 6 months ago | |
| 9a3c4775 | refactor: use JWTClientAuth get_audiences to define the acceptable audiences | Éloi Rivard <e****i@y****p> | 6 months ago | |
| 9266eaa2 | chore: release 1.6.9 | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| b9bb2b25 | fix(oidc): fail close at validating c_hash and at_hash | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| d0897b62 | fix: accept the issuer URL as a valid audience | Éloi Rivard <e****i@y****p> | 6 months ago | |
| 7f37b71b | merge Merge pull request #864 from azmeuk/rfc9700 |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 067223b6 | fix: rfc9700 PKCE downgrade countermeasure | Éloi Rivard <e****i@y****p> | 6 months ago | |
| 1b0a1d98 | fix(jose): generate random cek when cek length doesn't match | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| 5be3c518 | fix(jose): add ES256K into default jwt algorithms | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| 48b345f2 | fix(jose): remove deprecated algorithm from default registry | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| a5d4b2d4 | fix(jose): do not use header's jwk automatically | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| c758569f | merge Merge pull request #861 from authlib/fix-resolve-key |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| c93ccfa9 | merge Merge pull request #860 from authlib/fix-jwt-algorithms |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 0da617c9 | merge Merge pull request #863 from cclauss/patch-1 |
Éloi Rivard <e****i@y****p>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 41f2f6b8 | Update PyPy version from 3.10 to 3.11 |
Christian Clauss <c****s@m****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| c89e5dbf | fix: normalize resolve_client_public_key method | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| 8e099326 | fix: remove "none" from default authlib.jose.jwt algorithms | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| a769f343 | chore: release 1.6.8 | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| 84f3fa29 | fix: add EdDSA to default jwt algorithms | Hsiaoming Yang <m****e@l****m> | 6 months ago | |
| a9e4cfee | merge Merge pull request #858 from authlib/fix-get-jwt-config |
Hsiaoming Yang <m****e@l****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 9f428993 | tests: remove generate_id_token from tests | Hsiaoming Yang <m****e@l****m> | 7 months ago | |
| 3b4e4d34 | docs: update docs for get_jwt_config | Hsiaoming Yang <m****e@l****m> | 7 months ago | |
| 17fd7e1f | fix(oidc): deprecate get_jwt_config in OpenIDImplicitGrant | Hsiaoming Yang <m****e@l****m> | 7 months ago | |
| b58e4b18 | fix(oidc): refactor get_jwt_config for OpenIDToken | Hsiaoming Yang <m****e@l****m> | 7 months ago |