Repoze.who

Latest version: v3.0.0

Safety actively analyzes 619231 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 7

3.0.0b1

--------------------

- Add support for Python 3.9, 3.10 and 3.11.

- Drop support for Python 2.7, 3.4, 3.5, and 3.6.

- Add Github Actions workflow to exercise unit tests / coverage.

2.4.1

------------------

- Disallow separators in AuthTicket component values. Closes 37.

- Handle bytes / string correctly in 'repoze.who.plugins.htpasswd.sha1_check'.
Closes 28.

- Switch to use ``pytest`` as the testrunner. Closes 34.

2.4

----------------

- Add support for Python 3.6, 3.7, and 3.8.

- Drop support for Python 3.3.

- Fix travis configuration.

- Add ``samesite`` option to AuthTktCookiePlugin constructor.
If this is passed, it should be a string, and it will be used
to compose the Set-Cookie header's "SameSite" value, e.g.
if you pass ``samesite="Strict"`` into the constructor,
the cookie value for the auth tkt cooke will contain
``SameSite=Strict``.

2.3

----------------

- Add support for Python 3.4, Python 3.5, and PyPy3.

- Drop support for Python 2.6 and 3.2.

- ``middleware``: avoid passing extracted ``identity`` to ``remember``
during egress (the app may have called ``api.forget()``). See 21.

- ``_auth_tkt`` / ``plugins.auth_tkt``: add support for any hash algorithm
supported by the ``hashlib`` module in Python's standard library.
Fixes 22 via 23.

- ``plugins.auth_tkt``: Fix storage of "userdata" to save dict. Fixes
14 via 18.

- middleware: avoid UnboundLocalError when wrapped generater yields no
items. See: http://bugs.repoze.org/issue184

- Make cookie expiration date RFC-2616 compliant (independent of locale,
including 'GMT' zone). See 11.

2.2

----------------

- Parse INI-file configuration using ``SafeConfigParser``: allows
escaping the ``'%'`` so that e.g. a query template using for a DB-API
connection using ``pyformat`` preserves the template.

- Added support for Python 3.3, PyPy.

2.1

----------------

- ``_compat`` module: tolerate missing ``CONTENT_TYPE`` key in the WSGI
environment. Thanks to Dag Hoidal for the patch.

- ``htpasswd`` plugin: add a ``sha1_check`` checker function (the ``crypt``
module is not available on Windows). Thanks to Chandrashekar Jayaraman
for the patch.

- Documentation typo fixes from Carlos de la Guardia and Atsushi Odagiri.

Page 1 of 7

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.