• Include next on verify and us-verify forms.latestOpenAPI 3.0.3○4dd45e312026-08-14 20:04
• 2.0.0OpenAPI 3.0.3no API changes2026-07-17 12:08
• Add support for logout CSRFOpenAPI 3.0.3○21ac00852026-06-14 02:33
• Support for storing refresh token in a cookie.OpenAPI 3.0.3no API changesb9b6b012026-05-27 21:43
• Add revoke refresh token/tracker on logout (#1211)OpenAPI 3.0.3○21a9b8802026-05-08 18:04
• Refresh Token feature. (#1207)OpenAPI 3.0.3○9f28bdbd2026-05-02 03:09
• Add additional values for JSON responses when setting up an authenticater (#1191)OpenAPI 3.0.3○4fd57af82026-03-23 23:20
• Add support for using Social Login (OAuth) for reauthentication (verify). (#1183)OpenAPI 3.0.3○682575492026-03-06 14:55
• Add API (method in UserMixin) to enable fine-tuned two-factor requirements. (#1170)OpenAPI 3.0.3no API changes41ea63c2026-01-24 21:24
• Support forgot password (/reset) for authenticated users also. (#1137)OpenAPI 3.0.3○2d26bd4d2025-11-02 18:32
• Flip USE_REGISTER_V2 to true. (#1112)OpenAPI 3.0.3no API changes30bf9962025-08-04 23:47
• Improve templates - grammar, spelling, better formatting for xlation (#1071)OpenAPI 3.0.3no API changesd23a90c2025-02-08 15:22
• Add change username endpoint/view/feature (#1060)OpenAPI 3.0.3▲1○4b91a8512025-01-14 15:24
• feat(recoverable): Add support for username recovery via simple login flows (#1041)OpenAPI 3.0.3○29950c542024-12-30 06:01
• Update to new home - pallets-eco (#1015)OpenAPI 3.0.3no API changes3755a442024-07-31 17:07
• Add tf-setup endpoint that uses a state_token. (#991)OpenAPI 3.0.3▲1○2147a6122024-06-18 03:44
• Update /login and /us-signin to have the same behavior when called by an already authenticated user. They were similar - now identical. (#986)OpenAPI 3.0.3▲1●3○380a71392024-06-13 21:42
• Improve docs (#977)OpenAPI 3.0.3▲2○29616b522024-05-19 00:18
• Add support for changing email. (#974)OpenAPI 3.0.3○3442faf32024-05-14 17:41
• Chore - tests and docs (#930)OpenAPI 3.0.3○2e423abd2024-02-21 17:55
• Two-factor simplification and improvements. (#899)OpenAPI 3.0.3○35796c182024-01-05 19:03
• oauth improvements. (#895)OpenAPI 3.0.3○12e988332023-12-28 20:51
• Fix tf-validate returning authorization_token. (#864)OpenAPI 3.0.3▲36●1○10398ef2e52023-10-22 15:25
• TWO_FACTOR_VALIDITY changes. (#823)OpenAPI 3.0.3●59dcf7ec2023-07-25 01:52
• Change confirmation to default to NOT auto-login. (#820)OpenAPI 3.0.3no API changes58f93ef2023-07-22 22:49
• Improve /confirm w.r.t. OWASP (#817)OpenAPI 3.0.3no API changesbf59f632023-07-19 21:34
• Improve /reset w.r.t. OWASP (#816)OpenAPI 3.0.3▲1●1○2ed5c8242023-07-19 18:17
• Support for 'social'/OAuth authentication. (#716)OpenAPI 3.0.3○2286a8d02022-12-23 02:13
• Completely change json error response (#638)OpenAPI 3.0.3▲43●62○66693a0842022-07-22 01:09
• Add support for two-factor recovery codes. (#630)OpenAPI 3.0.3▲2●4○12fc6401d2022-06-18 02:20
• Improve empty password support. (#627)OpenAPI 3.0.3○112f6f9b2022-05-31 21:50
• Improve username support. (#625)OpenAPI 3.0.3●2○1ebbc0e92022-05-26 21:43
• Implement ability to delete a previously setup unified sign in method. (#609)OpenAPI 3.0.3▲8○4b0365282022-04-24 21:23
• Update swagger doc with Webauthn. (#603)OpenAPI 3.0.3▲69●20○49531057c2022-04-11 13:10
• Documentation changes for /login CSRF vulnerability. (#424)OpenAPI 3.0.0●119ef6cf2021-01-05 23:14
• Fix security vuln - QRcodes were available via GET on /qrcode - not protected with CSRF tokens (#423)OpenAPI 3.0.0▲2○7183a8262021-01-04 22:04
• Add a 2FA Validity Window (#401)OpenAPI 3.0.0○6a3ee3272020-10-21 01:41
• Improve two-factor JSON and tests. (#382)OpenAPI 3.0.0●7○1251501402020-08-31 01:50
• Remove all requirements of 'email' as a USER_IDENTITY_ATTRIBUTE. (#358)OpenAPI 3.0.0●944459d62020-07-16 01:54
• Require fs_uniquifier and stop referencing the UserModel PK. (#339)OpenAPI 3.0.0▲9○9ad4aef12020-06-15 01:47
• First pass - remove py2.7 and <3.6 support. (#321)OpenAPI 3.0.0no API changes0c232782020-05-15 01:31
• Move repo.OpenAPI 3.0.0no API changesaa992bf2020-04-30 13:55
• Fixes to us sign in (#303)OpenAPI 3.0.0▲1●3○689aac472020-04-17 23:19
• Generate new totp secret on each setup (#292)OpenAPI 3.0.0●282292442020-03-25 20:05
• Add config such that /us-signin becomes the default for /login. (#291)OpenAPI 3.0.0●1○1ac5c84b2020-03-25 01:37
• More unified sign in polishing. (#288)OpenAPI 3.0.0▲8○14da873052020-03-15 20:11
• Fix post-login redirect for already authenticated users. (#222)OpenAPI 3.0.0no API changesa28e2f92019-12-03 02:19
• chore: Update/improve docs (#177)OpenAPI 3.0.0▲7●1○81735ec52019-09-11 19:03
• Changes the way json's are rendered when json is wanted by the requester (#167)OpenAPI 3.0.0no API changes2b044042019-09-11 18:00
• fix/enhancement - Fix slow auth tokens. (#164)OpenAPI 3.0.0○4ae027a52019-08-15 21:51

Show older