- Resolved dependabot identified security issues
- Removed build status icon from travis (not used for CI any longer)
- Fix
MAuthASGIMiddleware
when accessingpath
whenpath
is not set yet. This appears to only happen on startup. - Replace the character
\n
on one-liner private keys.
- Revert change introduced in v1.6.2 now that Starlette has been updated to
always include
root_path
inpath
.
- Fix
MAuthASGIMiddleware
signature validation when the full URL path is split betweenroot_path
andpath
in the request scope.
- Fix
MAuthWSGIMiddleware
to return a string for "status" and to properly set content-length header.
- Fix bug with reading request body in
MAuthWSGIMiddleware
. - Remove Support for EOL Python 3.7
- Fix
MAuthWSGIMiddleware
to no longer depend onwerkzeug
data in the request env.
- Replace
cchardet
withcharset-normalizer
to support Python 3.11
- Add
MAuthWSGIMiddleware
for authenticating requests in WSGI frameworks like Flask. - Remove
FlaskAuthenticator
.
- Add
MAuthASGIMiddleware
for authenticating requests in ASGI frameworks like FastAPI. - Remove Support for EOL Python 3.6
- Ignore
boto3
import error (ModuleNotFoundError
).
- Extend the fallback cache TTL to 5 minutes.
- Add autodeploy to PyPI
- Remove Support for EOL Python 3.5
- Remove PyPy support
- Change the default signing versions (
MAUTH_SIGN_VERSIONS
option) tov1
only.
- Replace
V2_ONLY_SIGN_REQUESTS
option withMAUTH_SIGN_VERSIONS
option and change the default tov2
only.
- Add parsing code to test with mauth-protocol-test-suite.
- Add unescape step in query_string encoding in order to remove "double encoding".
- Add normalization of paths.
- Fall back to V1 when V2 authentication fails.
- Add
FlaskAuthenticator
to authenticate requests in Flask applications.
- Support binary request bodies.
- Fix
LambdaAuthenticator
to return an empty string on "200 OK" response.
- Add support for MWSV2 protocol.
- Rename
MAuthAuthenticator
toLambdaAuthenticator
.
- Initial release.