- update to 1.3.2:

* Prevent ever-growing session size for OAuth clients.
  * Revert quote client id and secret.
  * unquote basic auth header for authorization server.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Authlib?expand=0&rev=29
This commit is contained in:
2024-09-28 20:04:14 +00:00
committed by Git OBS Bridge
commit 8ca146f2a7
6 changed files with 251 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

1
.gitignore vendored Normal file
View File

@@ -0,0 +1 @@
.osc

3
authlib-1.3.1.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a8a74e0f1179318bbf898082ad0565f30b1d63bbed7b370529a395d5912380e3
size 319831

3
authlib-1.3.2.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8a6a7e4bc869491cafac524ec32e9f22ecb5de97801033b7b1e75a0824d5bf6f
size 321266

135
python-Authlib.changes Normal file
View File

@@ -0,0 +1,135 @@
-------------------------------------------------------------------
Sat Sep 28 20:03:15 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 1.3.2:
* Prevent ever-growing session size for OAuth clients.
* Revert quote client id and secret.
* unquote basic auth header for authorization server.
-------------------------------------------------------------------
Mon Jun 10 11:05:10 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
- Update to 1.3.1 (CVE-2024-37568, bsc#1226138):
* Prevent OctKey to import ssh and PEM strings.
-------------------------------------------------------------------
Tue Jan 23 17:10:58 UTC 2024 - Antonio Larrosa <alarrosa@suse.com>
- Remove the file containing a Commercial license otherwise
licensedigger rejects the dual-licensed package.
See https://docs.authlib.org/en/latest/community/licenses.html .
-------------------------------------------------------------------
Mon Jan 8 20:58:02 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 1.3.0:
* Restore AuthorizationServer.create_authorization_response
behavior, via :PR:`558`
* Include leeway in validate_iat() for JWT, via :PR:`565`
* Fix encode_client_secret_basic, via :PR:`594`
* Use single key in JWK if JWS does not specify kid, via
:PR:`596`
* Fix error when RFC9068 JWS has no scope field, via :PR:`598`
* Get werkzeug version using importlib, via :PR:`591`
* New features:
* RFC9068 implementation, via :PR:`586`, by @azmeuk.
* Breaking changes:
* End support for python 3.7
-------------------------------------------------------------------
Sun Jun 25 18:48:52 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 1.2.1:
* Apply headers in ``ClientSecretJWT.sign`` method
* Allow falsy but non-None grant uri params
* Fixed ``authorize_redirect`` for Starlette v0.26.0
* Removed ``has_client_secret`` method and documentation
* Removed ``request_invalid`` and ``token_revoked`` remaining
occurences and documentation.
* Fixed RFC7591 ``grant_types`` and ``response_types`` default
values
-------------------------------------------------------------------
Sun Jun 11 14:11:54 UTC 2023 - ecsos <ecsos@opensuse.org>
- Add %{?sle15_python_module_pythons}
-------------------------------------------------------------------
Tue Dec 13 03:19:54 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
- Update to version 1.2.0
* Not passing request.body to ResourceProtector, #485.
* Use flask.g instead of _app_ctx_stack, #482.
* Add headers parameter back to ClientSecretJWT, #457.
* Always passing realm parameter in OAuth 1 clients, #339.
* Implemented RFC7592 Dynamic Client Registration Management Protocol, #505`
* Add default_timeout for requests OAuth2Session and AssertionSession.
* Deprecate jwk.loads and jwk.dumps
-------------------------------------------------------------------
Tue Oct 11 23:14:36 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
- Update to Version 1.1.0
* This release contains breaking changes and security fixes.
* Allow to pass claims_options to Framework OpenID Connect clients, via PR#446.
* Fix .stream with context for HTTPX OAuth clients, via PR#465.
* Fix Starlette OAuth client for cache store, via PR#478.
-------------------------------------------------------------------
Thu Aug 4 06:30:52 UTC 2022 - Steve Kowalik <steven.kowalik@suse.com>
- Remove unneeded BuildRequires on mock.
- Remove duplicated BuildRequires on pytest.
-------------------------------------------------------------------
Mon May 9 22:06:00 UTC 2022 - Matej Cepl <mcepl@suse.com>
- Fix tests.
-------------------------------------------------------------------
Thu Apr 21 11:29:21 UTC 2022 - Michael Ströder <michael@stroeder.com>
- Update to 1.0.1
* Fix authenticate_none method, via #438.
* Allow to pass in alternative signing algorithm to RFC7523 authentication methods via #447.
* Fix missing_token for Flask OAuth client, via #448.
* Allow openid in any place of the scope, via #449.
* Security fix for validating essential value on blank value in JWT, via #445.
- Update to 1.0.0
* Dropped support for Python 2
* Removed built-in SQLAlchemy integration.
* The whole framework client integrations have been restructured
-------------------------------------------------------------------
Tue Nov 16 13:42:27 UTC 2021 - Michael Ströder <michael@stroeder.com>
- Update to 0.15.5
* Make Authlib compatible with latest httpx
* Make Authlib compatible with latest werkzeug
* Allow customize RFC7523 alg value
-------------------------------------------------------------------
Fri Aug 13 11:16:21 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 0.15.4
* Security fix when JWT claims is None.
-------------------------------------------------------------------
Mon Aug 9 22:19:38 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
- Drop filler wording from description again.
-------------------------------------------------------------------
Tue Mar 23 11:52:52 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- Update to 0.15.3
https://docs.authlib.org/en/latest/changelog.html#version-0-15-3
https://docs.authlib.org/en/latest/changelog.html#version-0-15-2
https://docs.authlib.org/en/latest/changelog.html#version-0-15-1
https://docs.authlib.org/en/latest/changelog.html#version-0-15
-------------------------------------------------------------------
Wed Aug 5 14:44:15 UTC 2020 - Stasiek Michalski <stasiek@michalski.cc>
- Initial package

86
python-Authlib.spec Normal file
View File

@@ -0,0 +1,86 @@
#
# spec file for package python-Authlib
#
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define modname authlib
%{?sle15_python_module_pythons}
Name: python-Authlib
Version: 1.3.2
Release: 0
Summary: Python library for building OAuth and OpenID Connect servers
License: BSD-3-Clause
URL: https://authlib.org/
Source: https://github.com/lepture/%{modname}/archive/refs/tags/v%{version}.tar.gz#/%{modname}-%{version}.tar.gz
BuildRequires: %{python_module setuptools}
BuildRequires: python-rpm-macros
# SECTION test requirements
BuildRequires: %{python_module anyio}
BuildRequires: %{python_module Django}
BuildRequires: %{python_module Flask-SQLAlchemy}
BuildRequires: %{python_module Flask}
BuildRequires: %{python_module SQLAlchemy}
BuildRequires: %{python_module Werkzeug}
BuildRequires: %{python_module cachelib}
BuildRequires: %{python_module cryptography}
BuildRequires: %{python_module httpx}
BuildRequires: %{python_module pytest-asyncio}
BuildRequires: %{python_module pytest}
BuildRequires: %{python_module requests}
BuildRequires: %{python_module starlette}
BuildRequires: %{python_module typing_extensions}
# /SECTION
BuildRequires: fdupes
Requires: python-cryptography
Suggests: python-requests
BuildArch: noarch
%python_subpackages
%description
A Python library for building OAuth and OpenID Connect servers.
%prep
%setup -q -n %{modname}-%{version}
# Remove the file containing the commercial license so licensedigger
# doesn't complain about the dual license
rm COMMERCIAL-LICENSE
%build
%python_build
%install
%python_install
%python_expand %fdupes %{buildroot}%{$python_sitelib}
%check
%{python_expand export PYTHONPATH=%{buildroot}%{$python_sitelib} PYTHONDONTWRITEBYTECODE=1
$python -mpytest tests/core
$python -mpytest tests/flask
# gh#lepture/authlib#456
$python -mpytest tests/jose -k 'not (test_dir_alg_xc20p or test_xc20p_content_encryption_decryption)'
export DJANGO_SETTINGS_MODULE=tests.clients.test_django.settings
$python -mpytest tests/clients
# export DJANGO_SETTINGS_MODULE=tests.django.settings
# $python -mpytest tests/django
}
%files %{python_files}
%doc README.rst
%license LICENSE
%{python_sitelib}/%{modname}
%{python_sitelib}/Authlib-%{version}*-info
%changelog