Daniel Garcia
a16a39baaa
* Improvements to recoverability and confirmation to align with
OWASP best practices and reduce possible exploitation.
* Webauthn Updates to handling of transport.
* Fix MongoDB support by eliminating dependency on flask-mongoengine. Improve MongoDB quickstart.
* Fix Quickstart for SQLAlchemy with scoped session.
* Login no longer, by default, checks for email deliverability.
* Token authentication is no longer accepted on endpoints which only allow 'session' as authentication-method. (N247S)
* /reset and /confirm and GENERIC_RESPONSES and additional form args don't mix.
* Reset password can be exploited and other OWASP improvements.
* Confirmation can be exploited and other OWASP improvements.
* Convert to pyproject.toml, build, remove setup.py/.cfg.
* the tf_validity feature now ONLY sets a cookie - and the token is no longer returned as part of a JSON response.
* Fix login/unified signin templates to properly send CSRF token. Add more tests.
* Improve Social Oauth example code.
- 5.2.0:
* Small updates to work with latest Flask/Werkzeug.
* Drop support for Python 3.7
* Drop support for older versions of dependent packages (such as Flask).
* Remove old Werkzeug compatibility check.
* Compatibility with Quart.
* Remove dependence on pkg_resources / setuptools (use importlib_resources package)
* Fix tests to work with latest Werkzeug/Flask. Update requirements_low to match current releases.
* Drop support for Python 3.7
- 5.1.2:
* Hungarian translations not working.
* Fix documentation for send_mail. (gg)
* Fix for latest mongoengine and mongomock.
* Fix inappropriate use of &thinsp& in French translations. (maxdup)
* Improve documentation around subclassing forms.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:flask/python-Flask-Security-Too?expand=0&rev=31
123 lines
4.7 KiB
RPMSpec
123 lines
4.7 KiB
RPMSpec
#
|
|
# spec file for package python-Flask-Security-Too
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: python-Flask-Security-Too
|
|
Version: 5.3.0
|
|
Release: 0
|
|
Summary: Security for Flask apps
|
|
License: MIT
|
|
URL: https://github.com/Flask-Middleware/flask-security
|
|
Source: https://files.pythonhosted.org/packages/source/F/Flask-Security-Too/Flask-Security-Too-%{version}.tar.gz
|
|
Patch0: no-mongodb.patch
|
|
# PATCH-FIX-OPENSUSE Use pyqrcodeng, we do not ship qrcode in OpenSUSE.
|
|
Patch1: use-pyqrcodeng.patch
|
|
# PATCH-FIX-OPENSUSE Ignore DeprecationWarning, can be dropped after next update
|
|
Patch2: filterwarnings-ignore-pkg_resources.patch
|
|
BuildRequires: %{python_module Authlib}
|
|
BuildRequires: %{python_module Babel >= 2.10.0}
|
|
BuildRequires: %{python_module Flask >= 2.3.2}
|
|
BuildRequires: %{python_module Flask-Babel >= 3.1.0}
|
|
BuildRequires: %{python_module Flask-Login >= 0.6.2}
|
|
BuildRequires: %{python_module Flask-Mailman >= 0.3.0}
|
|
BuildRequires: %{python_module Flask-Principal >= 0.4.0}
|
|
BuildRequires: %{python_module Flask-SQLAlchemy >= 3.0.3}
|
|
BuildRequires: %{python_module Flask-WTF >= 1.1.1}
|
|
BuildRequires: %{python_module PyQRCode >= 1.2}
|
|
BuildRequires: %{python_module SQLAlchemy}
|
|
BuildRequires: %{python_module WTForms-lang}
|
|
BuildRequires: %{python_module WTForms}
|
|
BuildRequires: %{python_module Werkzeug >= 2.3.3}
|
|
BuildRequires: %{python_module argon2_cffi >= 21.3.0}
|
|
BuildRequires: %{python_module bcrypt >= 4.0.1}
|
|
BuildRequires: %{python_module bleach >= 6.0.0}
|
|
BuildRequires: %{python_module blinker >= 1.4}
|
|
BuildRequires: %{python_module cachetools >= 3.1.0}
|
|
BuildRequires: %{python_module cryptography >= 40.0.2}
|
|
BuildRequires: %{python_module dateutil}
|
|
BuildRequires: %{python_module email-validator >= 1.1.1}
|
|
BuildRequires: %{python_module importlib_resources >= 5.10.0}
|
|
BuildRequires: %{python_module itsdangerous >= 1.1.0}
|
|
BuildRequires: %{python_module passlib >= 1.7.4}
|
|
BuildRequires: %{python_module peewee >= 3.16.2}
|
|
BuildRequires: %{python_module phonenumbers}
|
|
BuildRequires: %{python_module pip}
|
|
BuildRequires: %{python_module pony if %python-base < 3.11}
|
|
BuildRequires: %{python_module pytest >= 6.2.5}
|
|
BuildRequires: %{python_module setuptools}
|
|
BuildRequires: %{python_module wheel}
|
|
BuildRequires: %{python_module zxcvbn >= 4.4.28}
|
|
BuildRequires: fdupes
|
|
BuildRequires: python-rpm-macros
|
|
Requires: python-Flask >= 2.3.2
|
|
Requires: python-Flask-Babel >= 3.1.0
|
|
Requires: python-Flask-Login >= 0.6.2
|
|
Requires: python-Flask-Principal >= 0.4.0
|
|
Requires: python-Flask-WTF >= 1.1.1
|
|
Requires: python-WTForms >= 3.0.0
|
|
Requires: python-Werkzeug >= 2.3.3
|
|
Requires: python-bcrypt >= 4.0.1
|
|
Requires: python-bleach >= 6.0.0
|
|
Requires: python-blinker >= 1.4
|
|
Requires: python-cryptography >= 40.0.2
|
|
Requires: python-email-validator >= 1.1.1
|
|
Requires: python-importlib_resources >= 5.10.0
|
|
Requires: python-itsdangerous >= 1.1.0
|
|
Requires: python-passlib >= 1.7.4
|
|
Recommends: python-PyQRCode >= 1.2
|
|
Recommends: python-SQLAlchemy
|
|
Recommends: python-zxcvbn >= 4.4.28
|
|
Suggests: python-argon2_cffi >= 21.3.0
|
|
Suggests: python-phonenumbers
|
|
Conflicts: python-Flask-Security < 3.2.0
|
|
Obsoletes: python-Flask-Security < 3.2.0
|
|
Provides: python-Flask-Security = %{version}
|
|
BuildArch: noarch
|
|
%python_subpackages
|
|
|
|
%description
|
|
Flask-Security-Too is a Python module to add security features to a Flask
|
|
application. This is a independently maintained version of Flask-Security
|
|
based on the 3.0.0 version of the original.
|
|
|
|
%prep
|
|
%autosetup -p1 -n Flask-Security-Too-%{version}
|
|
|
|
%if 0%{?suse_version} <= 1500
|
|
# test_trackable.py needs werkzeug.middleware.proxy_fix which is only available
|
|
# in newer werkzeug versions
|
|
rm tests/test_trackable.py
|
|
%endif
|
|
|
|
%build
|
|
%pyproject_wheel
|
|
|
|
%install
|
|
%pyproject_install
|
|
%python_expand %fdupes %{buildroot}%{$python_sitelib}
|
|
|
|
%check
|
|
%pytest -k 'not test_login_email_whatever'
|
|
|
|
%files %{python_files}
|
|
%doc AUTHORS CHANGES.rst README.rst
|
|
%license LICENSE
|
|
%{python_sitelib}/flask_security
|
|
%{python_sitelib}/Flask_Security_Too-%{version}*-info
|
|
|
|
%changelog
|