0d52f70841
* default_reauthn_handler doesn't honor SECURITY_URL_PREFIX
* Add public API and CLI command to change a user's password.
* Add type hints. Please note that many of the packages that flask-security
* Add first-class support for using username for signing in.
* Possible open redirect vulnerability.
* Improve cookie handling and default ``samesite`` to ``Strict``.
* Email validation confusion - added documentation.
* Add documentation on how to override specific error messages.
* Don't install global-scope tests.
* Add Blinker as explicit dependency, improve/fix celery usage docs,
don't require pyqrcode unless authenticator configured, improve SMS
configuration variables documentation.
* Your UserModel must contain ``fs_uniquifier``
* Removal of python 2.7 and <3.6 support
* Remove two-factor `/tf-confirm` endpoint and use generic `freshness`
mechanism.
* Remove ``SECURITY_BACKWARDS_COMPAT_AUTH_TOKEN_INVALID(ATE)``. In
addition to not making sense - the documentation has never been correct.
* Add 2FA Validity Window so an application can configure how often the
second factor has to be entered.
* Add HTML5 Email input types to email fields.
- Refresh no-mongodb.patch
- Drop patches:
* no-setup-dependencies.patch
* fix-dependencies.patch
* 0001-Do-not-raise-a-TypeError-exception-if-phone.data-is-.patch
- Add patch use-pyqrcodeng.patch:
* Use pyqrcodeng rather than pyqrcode.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:flask/python-Flask-Security-Too?expand=0&rev=14
30 lines
1.3 KiB
Diff
30 lines
1.3 KiB
Diff
Index: Flask-Security-Too-4.1.2/flask_security/core.py
|
|
===================================================================
|
|
--- Flask-Security-Too-4.1.2.orig/flask_security/core.py
|
|
+++ Flask-Security-Too-4.1.2/flask_security/core.py
|
|
@@ -1411,7 +1411,7 @@ class Security:
|
|
and "authenticator" in cv("TWO_FACTOR_ENABLED_METHODS", app=app)
|
|
)
|
|
if need_qrcode:
|
|
- self._check_modules("pyqrcode", "TWO_FACTOR or UNIFIED_SIGNIN")
|
|
+ self._check_modules("pyqrcodeng", "TWO_FACTOR or UNIFIED_SIGNIN")
|
|
|
|
need_sms = (
|
|
cv("UNIFIED_SIGNIN", app=app)
|
|
Index: Flask-Security-Too-4.1.2/flask_security/totp.py
|
|
===================================================================
|
|
--- Flask-Security-Too-4.1.2.orig/flask_security/totp.py
|
|
+++ Flask-Security-Too-4.1.2/flask_security/totp.py
|
|
@@ -139,9 +139,9 @@ class Totp:
|
|
.. versionadded:: 4.0.0
|
|
"""
|
|
try:
|
|
- import pyqrcode
|
|
+ import pyqrcodeng
|
|
|
|
- code = pyqrcode.create(self.get_totp_uri(username, totp))
|
|
+ code = pyqrcodeng.create(self.get_totp_uri(username, totp))
|
|
with io.BytesIO() as virtual_file:
|
|
code.svg(file=virtual_file, scale=3)
|
|
image_as_str = base64.b64encode(virtual_file.getvalue()).decode("ascii")
|