- Admin site logout view caching with Django 4
- Turn invalid string
amr
claim into an array in JWT
- Support for Python 3.10 & 3.11
- Support for Django >=4.0
- Support for Python 3.6
- Support for Django 2.2
- Handle a list of configured issuers in
ApiTokenAuthentication
- Require Django version < 4
- An OIDC back channel logout endpoint implementation.
- Set required Django version to 2.2 and later.
- The
key_provider
argument ofhelusers.oidc.RequestJWTAuthentication.__init__
method was removed. It existed only for test support, but tests have been modified in a way that it's not needed any more.
- Set django-heluers' default auto field to be
django.db.models.AutoField
for Django versions >=3.2 to avoid unwanted migrations.
- An authentication/JWT validation service with minimal external dependencies:
helusers.oidc.RequestJWTAuthentication
.
- Supported Python versions: 3.6-3.9.
- Previously
drf-oidc-auth
was a hard dependency indjango-helusers
. That's no longer the case. Withindjango-helusers
thedrf-oidc-auth
package is only used by thehelusers.oidc.ApiTokenAuthentication
class. If you want to keep on using that class, make sure you bringdrf-oidc-auth
into your project as an explicit dependency. django-helusers
has been very much dependent on Django REST Framework (DRF), even though the user ofdjango-helusers
wouldn't otherwise need DRF. This dependency has been removed: it's now possible to usedjango-helusers
without DRF.
- Whenever
django-helusers
returns or provides aUser
object, theuuid
field is always of typeUUID
(previously it was sometimes of typestr
).