Skip to content

v1.0.0

Compare
Choose a tag to compare
@propertone propertone released this 29 Dec 00:51
· 13 commits to master since this release
1104e69
  • hostname no longer needs to be specified in KerberosAuthMiddleware constructor - any hostname in the keytab will be accepted
  • Set REMOTE_USER when valid auth is provided, even if not required
  • Limit the number of bytes read in request bodies on auth failure to mitigate a possible DoS attack. New parameter read_max_on_auth_fail can be set to customize or remove the limit
  • Support clients which don't request mutual authentication
  • Log Kerberos errors
  • Validate first word in Authorization header
  • Python 3 compatibility fixes
  • Various bug fixes
  • Update license from BSD-2-Clause to BSD-3-Clause
  • Project was moved to the D. E. Shaw Org