- In case the Oauth dance is interrupted, return a ``408 Request Timeout`` error instead of the ``401 Unauthenticated`` one. (11) - Do not call ``cliquet.load_default_settings`` from cliquet-fxa (12)
1.3.1
------------------
- Separate multiple scopes by a + in login URL.
1.3.0
------------------
**Bug fixes**
- Multiple scopes can be requested on the login flow. - Multiple scopes can be required for the app.
**Configuration changes**
- ``fxa-oauth.scope`` is now deprecated. ``fxa-oauth.requested_scope`` and ``fxa-oauth.required_scope`` should be used instead.
1.2.0
------------------
- Add default settings to define a policy "fxa". It is now possible to just include ``cliquet_fxa`` and add ``fxa`` to ``multiauth.policies`` setting list. - Do not check presence of cliquet cache in initialization phase. - Do not use Cliquet logger to prevent initialization errors.
1.1.0
------------------
- Do not prefix authenticated user with ``fxa_`` anymore (5)