Fastapi-users

Latest version: v13.0.0

Safety actively analyzes 630052 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 17

10.0.2

Not secure
Bug fixes

* Set Pydantic `orm_mode` on BaseUser schema

10.0.1

Not secure
Bug fixes

* Fix generic typing on `AuthenticationBackend` class
* Move exceptions in a dedicated module to avoid circular imports (related to 978)

10.0.0

Not secure
Breaking changes

Version 10 marks important changes in how we manage User models and their ID.

Before, we were relying only on Pydantic models to work with users. In particular the [`current_user` dependency](https://fastapi-users.github.io/fastapi-users/10.0/usage/current-user/) would return you an instance of `UserDB`, a Pydantic model. This proved to be quite problematic with some ORM if you ever needed to **retrieve relationship data** or make specific requests.

Now, FastAPI Users is designed to always return you a **native object for your ORM model**, whether it's an SQLAlchemy model or a Beanie document. Pydantic models are now only used for validation and serialization inside the API.

Before, we were forcing the use of UUID as primary key ID; a consequence of the design above. This proved to be quite problematic on some databases, like MongoDB which uses a special ObjectID format by default. Some SQL folks also prefer to use traditional auto-increment integers.

Now, FastAPI Users is designed to use **generic ID type**. It means that you can use any type you want for your user's ID. By default, SQLAlchemy adapter still use UUID; but you can quite easily switch to another thing, like an integer. Beanie adapter for MongoDB will use native ObjectID by default, but it also can be overriden.

[READ THE MIGRATION PATH](https://fastapi-users.github.io/fastapi-users/10.0/migration/9x_to_10x/)

Documentation improvements

* From this day, the documentation is **versioned**. It means that you'll be able read the documentation for older versions, starting at [v9.3](https://fastapi-users.github.io/fastapi-users/9.3/). There is a menu switch on top!

9.3.2

Not secure
Improvements

* Add version guards for DB adapters in prevision of v10

9.3.1

Not secure
Bug fixes and improvements

* Fix a bug where OAuth accounts could collide if providers use the same ID. Thanks ricfri 🎉
* Bump dependencies:
* `httpx-oauth >=0.4,<0.7`

9.3.0

Not secure
Fixes and improvements

* Allow to use RS256/ES256 algorithms to sign JWT. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/authentication/strategies/jwt/#rs256-example)] Thanks jtv8 🎉
* Allow to customize password hash strategy and algorithms [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/password-hash/)]
* ⚠️ For SQLAlchemy ([v3.0.0](https://github.com/fastapi-users/fastapi-users-db-sqlalchemy/releases/tag/v3.0.0)) and Tortoise ORM ([v2.0.0](https://github.com/fastapi-users/fastapi-users-db-tortoise/releases/tag/v2.0.0)), models have been updated so that the `password_hash` column can store longer strings. You'll likely need to perform a database migration.

Page 5 of 17

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.