flask-security

Very small release - fixes/improves the username support added in 4.1.0.
Minor other fixes - see CHANGES

A feature release with (hopefully) no backwards compatibility issues.
See CHANGES for a complete list:

1. Add typing
2. Add first-class support for username
3. Add a public API and CLI for changing a user's password.

A very small release - mostly documentation fixes - thanks to all the early adopters!

4.0.0, as a major release, is a non-backwards compatible release of Flask-Security. Please read the release/change notes carefully.

The /login and /change endpoints allowed a GET request to return the users authentication token. That's not good.
Now, as prior to 3.3.0, only successful POSTs can return the token.

4.0.0, as a major release, is a non-backwards compatible release of Flask-Security. Please read the release/change notes carefully.

Fix 3 regressions and a couple other bugs.

Fix a regression in two-factor.

Backport some documentation fixes.

The flask-security repo was moved to a github organization - Flask-Middleware.

See CHANGES for details.
Lots of small bug fixes in the new unified sign in feature.
Fixed a regression in the alternative ID feature.

WTForms 2.3.0 just came out - that required a small change.

3.4.0 introduces a few major features:

1. pluggable password validation, including a built-in version that does complexity checking and pwned checking.
2. a unified sign in mechanism allowing for much more flexible ways for applications to enable authentication - including different forms of identity, and different ways to generate and accept password/pass codes.

Please see the CHANGES document for details.

This fixes minor incompatibilities introduced with the latest Werkzeug and Flask-Login.

Pick up a few regressions and enhance two-factor auth.

There were some behavior regressions in /login w.r.t. already authenticated users - this has been fixed and reverted to prior behavior.

Another bug in 2FA w.r.t. when to generate a new totp secret was fixed.

Added 2FA support into register and confirm - so now all features work well with 2FA.

A small release:

• Improved documentation
• Support for argon2 as a password hash

This fairly large release has a lot of new features, significant performance improvements, some security issues fixed, and some backwards-incompatible changes.
Please review the CHANGES document carefully.

Lots of new features, bug fixes, documentation.

Goal is to release this in a week or so.

Please see CHANGES for details.

This rc does contain a new backwards-incompatible change.

Please see CHANGES in documentation.

Please see CHANGES for a complete list of features and issues fixed.

Please see CHANGES for details.

Fixed 2 translations issues - labels and error messages.