Skip to content

Release Notes

0.22.8

  • Add "kid" claim to tokens when asymmetric encryption is used
  • Provide public key thumbprint to be used as "kid" claim by consumer programs

0.22.7

  • Add get_public_key() function to facilitate JWKS like endpoints

0.22.6

  • Remediated for vulnerability on weak algorithm signature
  • Bump dependencies

0.22.5

  • Added logger
  • Increased DEBUG logging
  • Updated all dependencies

0.22.4

  • Replace Request with HTTPConnection
  • Updated all dependencies

0.22.2

0.21.4

  • Added FastAPI SecurityBase class

0.21.3

  • Fixed all test cases

0.21.1

  • Updated all dependencies to their latest version

0.20.5

  • Removed unused variable
  • Made set_pair_cookies() to merge user_claim Dict instead of relying on default value
  • Removed Python 3.8 from support due to the above Dict merge method

0.20.4

  • Upgraded cookie defaults to "safer" ones
  • set_pair_cookies() now 1st class citizen (though need to sort out user_claims still)
  • use lower case type for csrf cookies
  • Add+Update some exampes
  • Correct some english syntax but there's more to do

0.20.3

  • Renamed package in order to publish it in pypi
  • Scanned code with CodeQL and addressed all security issues found
  • Updated all dependencies as identified by dependabot
  • Merged all (to this date) pull request originally opened to the original author
  • Added missing tests for functionality added on the above PRs

0.19.0

  • Updated packages in general
  • Merged with fastapi-another-jwt-auth

0.18.0

  • Updated packages:
    • pytest-cov from 3.0.0 to 4.0.0
    • cryptography from 39.0.2 to 40.0.2
    • pytest 6.2.5 to 7.0.1
  • Updated github actions
  • Updated python version in tests from 3.10.10 to 3.10

0.5.0

  • Support for WebSocket authorization (Thanks to @SelfhostedPro for make issues)
  • Function get_raw_jwt() can pass parameter encoded_token

0.4.0

  • Support set and unset cookies when returning a Response directly

0.3.0

  • (Deprecated) environment variable support
  • Change name function load_end() -> load_config()
  • Change name function get_jwt_identity() -> get_jwt_subject()
  • Change name identity claims to standard claims sub (Thanks to @rassie for suggestion)
  • Additional headers in claims
  • Get additional headers claims from request or parsing token directly
  • Leeway exp claim decode token
  • Dynamic token expires time
  • Change name blacklist -> denylist
  • Denylist custom check refresh and access tokens
  • Issuer claim
  • Audience claim
  • Jwt decode algorithms
  • Dynamic algorithm create token
  • Token multiple location
  • Support RSA encryption (Thanks to @jet10000 for make issues)
  • Custom header name and type
  • Custom error message key and status code
  • JWT in cookies (Thanks to @m4nuC for make issues)
  • Add Additional claims
  • Add Documentation PR #9 by @paulussimanjuntak

0.2.0

  • Call create_token and get_jti function must be from dependency injection
  • Improve blacklist loader
  • Can load env from pydantic
  • Add docs on readme how to use without dependency injection and example on multiple files
  • Fix raise jwt exception PR #1 by @ironslob

0.1.0

  • Initial release.