What's Changed

• Disable at_hash verification (not used but could raise error in auth flow generating access and ID token simultaneously) by @sindrig in #58

New Contributors

• @sindrig made their first contribution in #58

Full Changelog: v0.4.2...v0.4.3

What's Changed

• Fix dependency for Firebase: auto-install cryptography with python-jose by @tokusumi in #63
• Add support python3.9 by @tokusumi in #64

Full Changelog: v0.4.1...v0.4.2

What's Changed

• ✏️ Fix broken link to CONTRIBUTING and grammar in README by @discdiver in #57
• Store Firebase JWKS expiry and refresh keys when they expire by @jleclanche in #60 & @tokusumi in #61
• codecov-action v1 to v2 by @tokusumi in #62

New Contributors

• @discdiver made their first contribution in #57

Full Changelog: v0.4.0...v0.4.1

Security updates:

• Add standard (and service specific) claims verification PR #45 by @tokusumi

Features:

• Support multiple scope validation PR #43 by @tokusumi

Fixes:

• Handle exceptions on malformed token PR #42 by @tokusumi & @jleclanche

Internal:

• Unification for test app instantiate PR #44 by @tokusumi

Add features:

• Add extraction for access token (#31). Get user info from access token easily. related issue are #14, #21, #27.

Breaking changes:

• Auth0 default scope key turned to be "permissions" ("scope" was scope key before v0.2.0). please make sure RBAC setting is valid.
• For development, environment variables, AUTH0_MGMT_CLIENTID and AUTH0_MGMT_CLIENT_KEY, will be required to auth0 testing.

Docs:

• Add development - contribution guide (#19)

Bug fixes:

• Various grammatical cleanups and a fix to the Auth0 example. (#15) by @justinrmiller
• Handle no-token exception in module to respect auto_error setting (#24, #26) by @mjvdvlugt

Internal changes:

• Unify testcases (#17, #18)
• Refactoring Base module (in #31)

Add features

• Firebase Authentication Support (Only ID token)

Doc

• Add Auth0 example
• Add Firebase Authentication example
• Add explanation how to define custom claims

Fix bug.

• (PR #8) To be compatible with authlib: resolve
  "TypeError: cannot pickle '_cffi_backend.FFI' object"

this version is same as v0.1.1 (8c60ca8)
release v0.1.2 because v0.1.1 in PyPi is not available in trouble.

• relax fastapi version from 0.60.1 <= x < 0.61.0 to 0.60.1 <= x < 1.0.0 . PR(#7) by @jurasofish

• first release
• Verify token (JWKS-based JSON Web Token)
• Authenticate with scope (permissions)
• Get user info in token
• Dependency injection of the above
• Use the above features in the interactive docs, else
• Support for Auth0 and AWS Cognito