Release 4.3.0

Added

• Add backend for Hashicorp Vault OIDC backend
• Add generic OpenID Connect backend
• Add Grafana OAuth2 backend
• Add MusicBrainz OAuth2 backend

Changed

• Fixed redirect state for Keycloak backend
• Add fallback to RSA256 in OpenID Connect when alg is not set
• Fixed Azure backend so it can be used with all Azure authority hosts

Release 4.2.0

Added

• Add fields that populate on create but not update SOCIAL_AUTH_IMMUTABLE_USER_FIELDS
• Add Gitea oauth2 backend
• Add Twitch OpenId backend
• Add CI Logon backend
• Add support for Python 3.10

Changed

• Fixed Slack user identity API call with Bearer headers
• Fixed microsoft-graph login error
• Fixed Twitch OAuth2 backend
• Fixed Facebook API version
• Fixed Okta authentication URLs
• Fixed Globus JWT signature algorithm
• Fixed kid key rotation for OpenID Connect
• Fixed e-mail fetching from Azure
• Fixed vkontakte API version
• Restricted lxml to 4.6.x to avoid problems in SAML

Release 4.1.0

Changes:

• Discourse backend
• Add get and delete class methods for NonceMixin
• Use stretegies as interface to fetch backends
• Get Apple user first and last name from self.data
• Instagram Legacy API has been replaced with Instagram Basic Display API since the first one was deprecated, see.
• Store expires_in for Zoom backend

Release 4.0.3

Changed

• Updated PyJWT version to 2.0.0
• Remove six dependency

4.0.2

Changed

• Fixes to Github-action release mechanism

Release 4.0.1

Changed

• Fixes to Github-action release mechanism

Release 4.0.0

Added

• PayPal backend
• Fence OIDC-based backend

Changed

• Dropped Python 2 support from testing stack
• Remove discontinued Google OpenId backend
• Remove discontinued Yahoo OpenId backend
• Fix jwt.decode() passed algorithm
• Prevent PyJWT v2.0.0 being installed
• Update Facebook Graph API to 8.0
• Update Amazon fetch-profile URL
• Fix Azure AD Tenant, unable to load certificate
• Fix Okta well-known URL
• Updated Discord's API hostname from discordapp.com to discord.com
• Pass client_secret in auth-complete on Kakao backend