- Better description in pyproject.toml

…ect.

Request user attached to the request

- Add a testcase for when an evil token is provided, but with the correct `kid`.

Signature loop improvement

…quires the user to do some more configuration, but makes dependencies easier to make without circular imports

- Add documentation and examples on how to do role checking
- `AzureAuthorizationCodeBearer` now returns a User object
- Add docs on how to load provider config on startup

- Add URL to image in README, for PyPI

v2: Remove `app` parameter from AzureAuthorizationCodeBearer, dependency now returns a User object

Make `upn` optional to support Client Credential Flow

…dd multi-tenant support.

**Multi-tenant support:**
- Support for multi-tenant applications
- Takes a coroutine to fetch valid `iss` for given `tid`

**Single-tenant features:**
- Support for v2 tokens for single-tenant applications
- User object is reworked, and now also contains the access_token for easier Azure Graph implementation

**Removal:**
- `allow_guest_users` setting is removed. This can be done in Azure AD instead. (Also removal of `GuestUserException`)

**Other:**
- Add SECURITY.md
- Relax aiohttp requirement
- Move `InvalidAuth` to `exceptions.py`
- Add role check example in demo project
- Add `iss` fetcher example in demo project
- No longer inheriting `OAuth2AuthorizationCodeBearer`, solving mypy errors.
- Rename `provider_config.py` to `openid_config.py` and `ProviderConfig()` to `OpenIdConfig()`
- Removal of pre-instance of `provider_config` due to OpenAPI authorization URL issues. This is now instanced on `SingleTenantAzureAuthorizationCodeBearer` or `MultiTenantAzureAuthorizationCodeBearer`.

**Tests:**
- 100% codecov for v1 and v2 single-tenant applications
- 99% codecov for openid_config

**TODO:**
- Documentation needs full rewrite
- Tests for multi-tenant
- Test for `openid_config` `app_id`

…y()` (instead of `Depends()`)

- Fix missing `Authorize` button in OpenAPI documentation
  - Add tests for OpenAPI documentation, so this won't happen again.

- Add single-tenant tests for multi-tenant

…sas inheritance for the different app types

- Add test for validate_iss=False

(SECURITY.MD will be merged when the multi-tenant branch is merged.)

Add issue templates

Add `v2` token support for single-tenant applications, add multi-tenant support and a whole lot of other things

Add docs

Version 3.0.0

Docs and versionbump to 3.0.0, preparing for 3.0.0 release

… main

Add re-export of imports in __iniy__.py. This solves mypy errors for library users using `--no-implicit-reexport`.

* Correct scheme name

Update typo in auth.py

…r to adopt the package.

Daniwk Intility#21 minor changes docs

This is a change in the way the hazmat section of the cryptography module is organized. This fixes the error received when using the most up to date version of cryptography (at the date of writing).

incrementing to v35.0.0 or higher.

… since it is directly imported in project files.

Update the _types module to primitives types

Version 3.0.1

Getting an error now that FastAPI had 2 minor patch releases yesterday.

Updating version range due to strict fastapi req

Handle restriction in fastapi versioning since they are pre 1.0.0 release.

The previous change was incorrect in the way python handles ^versions. I believe this should be reasonable enough without lurching things towards a breaking change.

Fix fastapi versioning.

…ty/templates Intility#56

- Remove unused `end_session_endpoint`
- Rewrite tests

Fix codeql scan

Trio support

…d API key auth

Implement `auto_error` flag - Resolves Intility#43

- changed key construction to be generic, instead of depending on x5c
field
- added an option openid_config parameter

- this doesn't fix all the tests yet