3.2.2 - Loosen cryptography version requirement

Fixes

• Loosen cryptography version requirement, adding support for cryptography version 36, and future major bumps. ( @JonasKs, 6386890)

3.2.1 - Callable typing bugfix for Python3.9.0 and 3.9.1

Bugfix

• Python3.9.0 and Python3.9.1 has a bug with collections.abc.Callable, so this typing import has been changed to typing.Callable ( @ravaszf and @JonasKs #50 )

3.2.0 - Auto_error flag

Features

• auto_error flag/setting. When set to False an invalid token will return None instead of raising exception. ( @bkmetzler and @JonasKs #44 )
  • This flag allows end users to configure multiple authentication paths, and reflects authentication classes shipped by FastAPI.

3.1.0 - Trio support

Features

• Trio support, by replacing aiohttp with httpx( @JonasKs #34 )
  • Testsuite is now running on both asyncio and trio, using anyio. aioresponses has been replaced with respx
  • Since FastAPI version 0.69.0, trio is officially supported

3.0.3 - Fix syntax for FastAPI version

Fixes

• Fixes FastAPI version syntax ( @bmoore #30 )

3.0.2 - Loosen FastAPI version requirement

Fixes

• Loosen FastAPI version requirement, allowing installation of this module on FastAPI 0.70.0+ ( @bmoore #28 )
  • Add Python3.10 and FastAPI==0.70.0 to pipeline matrix ( @JonasKs #28 )

3.0.1 - Cryptography requirement upgrade and documentation fixes

Fixes

• Multi-tenant schema documentation ( #20 @sondrelg )
• Multiple errors in the documentation ( #22 @daniwk )
• Update cryptography requirement to ^35.0.0 and fix imports ( #26 @bmoore )

3.0.0 - Rewrite, v2 token support, single- and multi-tenant support

This release contains breaking changes for how to setup your application, but also a bunch of new features.

The new documentation contains a full tutorial on how to configure Azure AD and FastAPI for both single- and multi-tenant applications.

Features

• Add v2 token support (and default) for single-tenant applications.
• Full multi-tenant support
  • Option to provide a callable which returns valid iss(issuers), for those who has multi-tenant applications, but only for specific tenants

Other

• User object is reworked, now also contain access_token for easier Azure Graph implementation
• Add support for denying requests with wrong scopes, when Securiy() is used (an alternativ to Depends())
• Moved InvalidAuth to exceptions.py
• Documentation for everything from role checks, guest users, locking down tenants etc.
• No longer inheriting OAuth2AuthorizationCodeBearer, solving mypy errors.
• Rename provider_config.py to openid_config.py and ProviderConfig() to OpenIdConfig()
• Removal of pre-instance of provider_config due to OpenAPI authorization URL issues. This is now instanced on SingleTenantAzureAuthorizationCodeBearer or MultiTenantAzureAuthorizationCodeBearer.

Features implemented in #16 ( @JonasKs )

3.0.0-rc1 - Release candidate

Release candidate for 3.0.0.

Release notes will be written for the actual release.

2.0.1 - Make `upn` an optional field in the `User` model

Fixes

• Make upn an optional field in the User model, to support Client Credential Flow ( #12 @JonasKs )