Kinto-dist

Latest version: v27.0.3

Safety actively analyzes 630254 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 14 of 47

11.0.0

Not secure
**Breaking changes**

- The ``basicauth`` policy is not used by default anymore (1736)

If your application relies on this specific behaviour, you now have to add explicitly settings:

.. code-block:: ini

multiauth.policies = basicauth

But **it is recommended** to use other authentication policies like the *OpenID Connect* or the *accounts* plugin instead.

.. code-block:: ini

Enable plugin.
kinto.includes = kinto.plugins.accounts

Enable authenticated policy.
multiauth.policies = account
multiauth.policy.account.use = kinto.plugins.accounts.AccountsPolicy

Allow anyone to create their own account.
kinto.account_create_principals = system.Everyone

You will find more details the `authentication settings section of the documentation <https://kinto.readthedocs.io/en/stable/configuration/settings.html#authentication>`_

**Bug fixes**

- Fix crash when querystring filter contains NUL (0x00) character (Kinto/kinto1704)
- Many bugs were fixed in the Kinto Admin UI (see `v1.21.0 <https://github.com/Kinto/kinto-admin/releases/tag/v1.21.0>`_)

**Documentation**

- Huge refactor of documentation about authentication (1736)

kinto-admin
-----------

10.1.2

**Internal changes**

- Upgrade kinto-admin to v1.20.2


kinto-admin
-----------

10.1.1

**Breaking changes**

- ``kinto.core.events.get_resource_events`` now returns a generator
rather than a list.


**New features**

- Include Python 3.7 support.
- ``kinto.core.events.notify_resource_event`` now supports
``resource_name`` and ``resource_data``. These are useful when
emitting events from one view "as though" they came from another
view.
- Resource events can now trigger other resource events, which are
handled correctly. This might be handy if one resource wants to
simulate events on another "virtual" resource, as in ``kinto-changes``.
- The registry now has a "command" attribute during one-off commands
such as ``kinto migrate``. This can be useful for plugins that want
to behave differently during a migration, for instance. (1762)

**Bug fixes**

- Raise a configuration error if the ``kinto.plugin.accounts`` is included without being enabled in policies.
Without this *kinto-admin* would present a confusing login experience (fixes 1734).
- Deleting a collection doesn't delete access_control_entrries for its children (fixes 1647)
- Fix for adding extra OpenId providers (fixes 1509)
- Change the meaning of ``event.payload["timestamp"]``. Previously it
was ``reify``\ 'd, which meant that it was calculated from before
whatever thing triggered the event. Now we use a "fresh"
timestamp. (Fixes 1469.)

**Internal changes**

- Upgrade kinto-admin to v1.20.0

kinto-changes
-------------

10.0.2

Not secure
===================

10.0.1

Not secure
===================

kinto
-----

10.0.0

Not secure
===================

kinto
-----

Page 14 of 47

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.