Requests-aws4auth

Latest version: v1.2.3

Safety actively analyzes 628903 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 3

1.1.0

=========

**New features**

- query string ordering has been fixed. Documented in 21, fixed in 23. Thanks zen4ever.
- test for spaces before calling shlex on them in `amz_norm_whitespace`. shlex doesn't like to split whitespace on a string without whitespace, taking several orders of magnitude longer to parse through it. 35, thanks noamkush.
- added `refreshable_credentials`, see 37, thanks teemuy.

**Package changes**

- Removed python2.7 support. Usage of py2.7 is not supported. `Requires-Python` will be set to py3.3+ in the next minor release.

**Tests**

- none

1.0.1

=========

**New features**

- none

**Package changes**

- bump to proper X.Y.Z semver syntax
- bump project to stable (33)

**Tests**

- none

1.0

=========

**New features**

- none!

**Package changes**

- add flake8 config
- convert docs to markdown
- Removed bundled six.py.
- Taken over ownership via [PEP451](https://www.python.org/dev/peps/pep-0541/#continue-maintenance); [pypi issue here](https://github.com/pypa/pypi-support/issues/393), [successfully contacted Sam](https://github.com/sam-washington/requests-aws4auth/issues/40).

**Tests**

- remove sys path hacking from tests.
- Ensure they work now.
- Github Actions are in place for continuous integration.
- Allow longer flake8 line length in tests.

0.9

================

**New features**

- Support for STS temporary credentials. Thanks to
<https://github.com/magdalene>

**Tests**

- Tests for the STS temporary credentials functionality
- Fixed `AWS4SigningKey.amz_date` deprecation warning test
- Elastic MapReduce live service test no longer using deprecated DescribeJobFlows action

0.8

================

This version introduces some behaviour changes designed to reduce the legwork needed when a signing key goes out of date. This has implications for multithreading and secret key storage. See the README for further details.

**New features**

- AWS4Auth class now checks request header date against signing key
scope date, and automatically regenerates the signing key with the
request date if they don't match
- Added exceptions module with new exceptions:
RequestsAWS4AuthException, DateMismatchError, NoSecretKeyError, DateFormatError
- Added StrictAWS4Auth and PassiveAWS4Auth classes

**AWS4Auth changes**

- Added `regenerate_signing_key()` method, to allow regeneration of
current signing key with parameter overrides
- Added methods for checking and extracting dates from requests:
`get_request_date()`, `parse_date()`, `handle_date_mismatch()`
- `__call__()` now checks for a date header in the request and
attempts to automatically regenerate the signing key with the
request date if request date differs from the signing key date
- Can now supply a date to the constructor
- Changed default included sig headers to include `Date` header if
present

**AWS4SigningKey changes**

- Added new `store_secret_key` instantiation parameter which allows
control of whether the secret key is stored in the instance
- Deprecated the `amz_date` property in favour of just `date`
- Spelling typo fix in AWS4AuthSigningKey module docstring. Thanks to jhgorrell

**Package changes**

- Dropped support for Python 3.2. Now only supported on Python 2.7 and
3.3 and up, to match versions supported by Requests.

**Tests**

- Many new tests for the new functionality
- Added tests for generating canonical path, including test for fix
added in 0.7 for percent encoding of paths
- Added tests for generating canonical querystrings

0.7

================

**Bugfixes**

- Fixed percent encoded characters in URL paths not being encoded
again for signature generation, as is expected for all services
except S3. This was causing authentication failures whenever these
characters appeared in a URL. Thanks to ipartola and cristi23 for
the report.
- Two bugfixes for ElasticSearch, thanks to Matthew Thompson for both:
- No longer setting body to `b''` during signing if it's None
- Now stripping port from URL netloc for signature generation

**Modules**

- Upgraded the included version of six.py to 1.10

**Tests**

- Fixed a couple of broken Unicode tests on Python 2
- Added a couple more tests for encoding Unicode request bodies

Page 2 of 3

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.