fastapi-azure-auth

What's Changed

• fix: Python 3.9 and 3.9 support by @ndxmrb in https://github.com/Intility/fastapi-azure-auth/pull/209

New Contributors

• @ndxmrb made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/209

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/5.0.0...5.0.1

Breaking changes:

• Azure Entra (previously Active Directory) v1 token support dropped. This is mainly to reduce tests by 30%, and for a use-case I haven't documented, nor recommend anyone to use. If you're on v1 tokens, you should upgrade. ( #200 @JonasKs )
• Pydantic v1 support dropped. Deprecation warnings fixed, closes #150 ( #200 @JonasKs )
• InvalidAuth now takes detail AND request object. ( #200 @JonasKs ) Users should be explicit and use InvalidAuthHttp or InvalidAuthWebSocket if they use this class. Example:

-raise InvalidAuth(detail="Missing admin role")
+raise InvalidAuthHttp(detail="Missing admin role")  # for HTTP requests
+raise InvalidAuthWebSocket(detail="Missing admin role")  # for WebSocket requests

Docs:

• Use lifetimes instead of scopes ( #200 @JonasKs )
• How to ensure only certain roles can access APIs, closing #117 ( #200 @JonasKs )
• No need for redirect URL https://github.com/Intility/fastapi-azure-auth/issues/72#issuecomment-2226801501, closed in #202 ( #202 @JonasKs )

Feat:

• Add support for WebSockets, closes #191, #155 ( #200 @JonasKs )

Fix:

• Empty raise, closes #192 ( #2020 @JonasKs )

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.4.0...5.0.0

This is a release candidate of 5.0.0.

Breaking changes:

• Azure Entra (previously Active Directory) v1 token support dropped. This is mainly to reduce tests by 30%, and for a use-case I haven't documented, nor recommend anyone to use. If you're on v1 tokens, you should upgrade. ( #200 @JonasKs )
• Pydantic v1 support dropped. Deprecation warnings fixed, closes #150 ( #200 @JonasKs )
• InvalidAuth now takes detail AND request object. ( #200 @JonasKs ) Users should be explicit and use InvalidAuthHttp or InvalidAuthWebSocket if they use this class. Example:

-raise InvalidAuth(detail="Missing admin role")
+raise InvalidAuthHttp(detail="Missing admin role")  # for HTTP requests
+raise InvalidAuthWebSocket(detail="Missing admin role")  # for WebSocket requests

Docs:

• Use lifetimes instead of scopes ( #200 @JonasKs )
• How to ensure only certain roles can access APIs, closing #117 ( #200 @JonasKs )
• No need for redirect URL https://github.com/Intility/fastapi-azure-auth/issues/72#issuecomment-2226801501, closed in #202 ( #202 @JonasKs )

Feat:

• Add support for WebSockets, closes #191, #155 ( #200 @JonasKs )

Fix:

• Empty raise, closes #192 ( #2020 @JonasKs )

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.4.0...5.0.0-rc0

What's Changed

• Migrate from python-jose to PyJWT by @dvdalilue in https://github.com/Intility/fastapi-azure-auth/pull/194
  • This resolves GHSA-6c5p-j8vq-pqhj, thank you so much @dvdalilue.

Other

• chore(deps): bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/190
• chore(deps): bump peaceiris/actions-gh-pages from 3 to 4 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/193

New Contributors

• @dvdalilue made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/194

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.3.1...4.4.0

What's Changed

• fix #180 change acct claim type from str to int by @copdips in https://github.com/Intility/fastapi-azure-auth/pull/181
• chore(deps): bump actions/setup-python from 4 to 5 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/175
• chore(deps): bump actions/cache from 3.3.2 to 4.0.1 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/183
• chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/184
• Bump version by @JonasKs in https://github.com/Intility/fastapi-azure-auth/pull/185

New Contributors

• @copdips made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/181

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.3.0...4.3.1

What's Changed

• doc: add B2C user docs by @davidhuser in https://github.com/Intility/fastapi-azure-auth/pull/140
• docs: rewrite single-tenant docs to be pydantic2 first by @JonasKs in https://github.com/Intility/fastapi-azure-auth/pull/153
• chore(deps): bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/151
• chore(deps): bump actions/checkout from 3 to 4 by @dependabot in https://github.com/Intility/fastapi-azure-auth/pull/152
• doc: add troubleshooting page with logging section by @davidhuser in https://github.com/Intility/fastapi-azure-auth/pull/163
• doc: add example to call APIs via B2C by @davidhuser in https://github.com/Intility/fastapi-azure-auth/pull/162
• parse auth_time as an int by @roman-van-der-krogt in https://github.com/Intility/fastapi-azure-auth/pull/167
• Add scope to documentation by @nikstuckenbrock in https://github.com/Intility/fastapi-azure-auth/pull/159
• configurable leeway by @mehtatejas in https://github.com/Intility/fastapi-azure-auth/pull/165

New Contributors

• @roman-van-der-krogt made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/167
• @nikstuckenbrock made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/159
• @mehtatejas made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/165

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.2.1...4.3.1

What's Changed

• move openapi-spec-validator and pydantic-settings to dev deps by @enadeau in https://github.com/Intility/fastapi-azure-auth/pull/146

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.2.0...4.2.1

What's Changed

• Add support for pydantic v2 by @enadeau in https://github.com/Intility/fastapi-azure-auth/pull/144
• OpenApi schema test by @enadeau in https://github.com/Intility/fastapi-azure-auth/pull/143
• fix: make tid and oid optional to allow User validation in B2C by @davidhuser in https://github.com/Intility/fastapi-azure-auth/pull/145

New Contributors

• @davidhuser made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/145

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.1.3...4.2.0

What's Changed

• Fixed optional claims by @Bulga-xD and in https://github.com/Intility/fastapi-azure-auth/pull/139

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.1.2...4.1.3

What's Changed

• Documentation fixes by @enadeau in https://github.com/Intility/fastapi-azure-auth/pull/134
• Fix optional claims by @Bulga-xD in https://github.com/Intility/fastapi-azure-auth/pull/138

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.1.1...4.1.2

What's Changed

• Fix scp for access token by @enadeau in https://github.com/Intility/fastapi-azure-auth/pull/133

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.1.0...4.1.1

Summary

All claims have now been added to the user object.

Commits

• Add sub and oid field to user model by @enadeau in https://github.com/Intility/fastapi-azure-auth/pull/132
• Extend the user model with all possible claims by @omBratteng in https://github.com/Intility/fastapi-azure-auth/pull/131

New Contributors

• @enadeau made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/132
• @omBratteng made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/131

Thank you so much, both of you 😊

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/4.0.0...4.1.0

Breaking change

Single- and multi-tenant applications now have a default setting that denies guest users access to the APIs. The documentation has been updated, please read it if you'd like to override this setting, or have different settings for different endpoints.

Note: B2C tenants allow guest users by default, as all users will be guest users.

Changes

• add!: default deny guest users in single- and multi-tenant applications by @JonasKs in #124
• Poetry Dev Key Update by @ingvaldlorentzen in https://github.com/Intility/fastapi-azure-auth/pull/113
• fix: deprecation warning issue on chypotography keytypes by @tsw025 in https://github.com/Intility/fastapi-azure-auth/pull/120

New Contributors

• @ingvaldlorentzen made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/113
• @tsw025 made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/120

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/3.5.1...4.0.0

Changes

• Fixes README example scopes usage by @infomiho in https://github.com/Intility/fastapi-azure-auth/pull/102
• chore: support python3.11 by @JonasKs in https://github.com/Intility/fastapi-azure-auth/pull/107

New Contributors

• @infomiho made their first contribution in https://github.com/Intility/fastapi-azure-auth/pull/102

Full Changelog: https://github.com/Intility/fastapi-azure-auth/compare/3.5.0...3.5.1

Features:

• B2CMultiTenantAuthorizationCodeBearer class which simplifies a multi-tenant B2C setup. ( #93 @kristiqntashev )

Fix:

• Make tid optional in the User model to support tokens sent from a B2C single-tenant ( #96 @marcinplatek )

Github actions:

• Fix caching ( @jonasks )

Features

• Support Python3.8. ( #75, @manupatel007 ) 🚀

Features

• Add setting to specify openid_config_url in AzureAuthorizationCodeBearerBase to add support for B2C tenants. ( #48 @robteeuwen and @JonasKs )
• Use python-jose to load JWK, instead of x5c-keys loaded with cryptography. This add support for B2C tenants ( #48 @robteeuwen and @JonasKs )

Other

• Rewrite tests and clean up code ( #48 @JonasKs )

Fixes

• Loosen cryptography version requirement, adding support for cryptography version 36, and future major bumps. ( @JonasKs, 63868904e9c7c2f3da31cdeefebec4884da402b4)

Bugfix

• Python3.9.0 and Python3.9.1 has a bug with collections.abc.Callable, so this typing import has been changed to typing.Callable ( @ravaszf and @JonasKs #50 )

Features

• auto_error flag/setting. When set to False an invalid token will return None instead of raising exception. ( @bkmetzler and @JonasKs #44 )
  • This flag allows end users to configure multiple authentication paths, and reflects authentication classes shipped by FastAPI.