v0.11
Welcome to django-browserid 0.11! django-browserid is a library that integrates BrowserID/Persona authentication into Django.
This release is backwards-compatible with 0.10.1.
Python and Django versions
django-browserid is tested on Python 2.6, 2.7, 3.2, 3.3, and 3.4, and on Django 1.4, 1.5, 1.6, and 1.7. It may work on other version combinations, but we haven't gotten around to testing them yet, so you should expect possible errors.
What's new in django-browserid 0.11
Local Assertion Verification
When a user logs in, they retrieve an assertion from Persona, and submit it to your server. Your server then sends it to a remote verification service hosted by Mozilla, which verifies and assertion and returns the email that the user is asserting that they control.
Now, if PyBrowserID is installed, you can verify assertions locally instead of relying on the remote service, which should speed up login times as well as remove the dependency on the remote service. The Customization docs have a section on using local assertion verification.
Auto-login Backend for Offline Development
Offline development on a Persona-enabled site is difficult to impossible since the login popup (and verification if you're not using local verification) rely on internet access. To remedy this, we added an auto-login feature that automatically logs you in under a specific email when you click the login button. Setting up for offline development is covered in the Extras section of the documentaiton.
Django 1.7 Tests
Our automated test suite is now running against Django 1.7 on Python 2.7, 3.2, 3.3, and 3.4. And they just passed without any changes. Yay!
Other fixes
A handful of minor fixes and features also landed, such as support for passing on_ready to navigator.id.watch while using the django-browserid JavaScript API, fixing the broken Django admin integration, and several documentation fixes. The full changelog can be found in CHANGELOG.rst.
Next Release
Well, the plan used to be to let 0.10 stew and consider a 1.0 release, but clearly that didn't quite work out. The number of changes this time were much smaller though, so we're again going to watch how this version works out and consider a 1.0 release. This feels very close though, so here's to hoping for a final frozen API!
Credits
Special thanks for this release goes to @willkg and @peterbe for their continued maintainer work reviewing and merging changes.
A massive thank you to all the contributors to django-browserid 0.11: