Release 4.5.4

Added

• LinkedIn supports refresh token

Changed

• SteamOpenId validation of identify URL
• Box state redirestion
• The uid is automatically converted to string in the pipeline
• Mediawiki error handling

Release 4.5.3

Added

• OpenStreetMap OAuth2

Changed

• Etsy backend fixes

Release 4.5.2

Added

• Etsy backend

Changed

• Updated Facebook API version to 18.0
• Make AppleID work with multiple identifiers

Release 4.5.1

Changed

• OpenID Connect skips at_hash validation when missing
• redirect_name is now passed to backend on do_complete
• next is preserved through SAML RelayState
• Add Discogs backend
• Add BitbucketDataCenterOAuth2 backend
• Keycloak's ID_KEY is no longer configurable (it never worked)

Release 4.5.0

Changed

• Add backend for LinkedIn OpenID Connect
• Add backend for EGI Check-in
• Support Python 3.12 (and 3.11)
• Add backend for the WLCG IAM testing site
• Add ping identity OIDC backend
• Add uffd oauth2 backend
• Add Clever backend
• Add Twitter OAuth2 backend
• Add backend for e-infra.cz
• Replace jose with pyjwt

Release 4.4.2

Changed

• Fixed Azure AD Tenant authentication with custom signing keys
• Added CAS OIDC backend

Release 4.4.1

Changed

• Moved Facebook Limited Login to a separate module to avoid extra dependency
• Update Azure AD B2C base URL to match updated endpoints

Release 4.4.0

Added

• Backend for OpenInfra OpenID
• Facebook Limited Login backend
• Add support for Python 3.11

Changed

• Removed OpenStackDevOpenId backend
• Updated user_data method in StripeOAuth2 to return email in get_user_details
• Removes fixed version of lxml
• Fixed OIDC crash on groups
• Fixed Qiita users identification
• Dropped support for TLSv1
• Coding style improvements

Release 4.3.0

Added

• Add backend for Hashicorp Vault OIDC backend
• Add generic OpenID Connect backend
• Add Grafana OAuth2 backend
• Add MusicBrainz OAuth2 backend

Changed

• Fixed redirect state for Keycloak backend
• Add fallback to RSA256 in OpenID Connect when alg is not set
• Fixed Azure backend so it can be used with all Azure authority hosts

Release 4.2.0

Added

• Add fields that populate on create but not update SOCIAL_AUTH_IMMUTABLE_USER_FIELDS
• Add Gitea oauth2 backend
• Add Twitch OpenId backend
• Add CI Logon backend
• Add support for Python 3.10

Changed

• Fixed Slack user identity API call with Bearer headers
• Fixed microsoft-graph login error
• Fixed Twitch OAuth2 backend
• Fixed Facebook API version
• Fixed Okta authentication URLs
• Fixed Globus JWT signature algorithm
• Fixed kid key rotation for OpenID Connect
• Fixed e-mail fetching from Azure
• Fixed vkontakte API version
• Restricted lxml to 4.6.x to avoid problems in SAML