flask-security-external-api revision history

Fix for rapidoc 11 + yaml improvements.latest152Docs 8c0254b 2026-10-17 02:23
Change detail
8 changes across 2 operations
- GET/tf-setup
  breaking
  the response's body type changed from object to no type for status (media type: application/json)
  warning
  removed the optional property from the response with the status (media type: application/json)
  warning
  removed the optional property from the response with the status (media type: application/json)
  warning
  removed the optional property from the response with the status (media type: application/json)
  warning
  removed the optional property from the response with the status (media type: application/json)
  warning
  removed the optional property from the response with the status (media type: application/json)
  info
  added subschema #2 to the response body allOf list for the response status (media type: application/json)
- GET/tf-validate
  info
  added the media type application/json for the response with the status
Include next on verify and us-verify forms.4Docs dd45e31 2026-08-14 20:04
Change detail
4 changes across 2 operations
- POST/us-verify
  info
  added the new optional request property (media type: application/json)
  info
  added the new optional request property (media type: application/x-www-form-urlencoded)
- POST/verify
  info
  added the new optional request property (media type: application/json)
  info
  added the new optional request property (media type: application/x-www-form-urlencoded)
2.0.0no API changesDocs2026-07-17 12:08
Add support for logout CSRF2Docs 1ac0085 2026-06-14 02:33
No leveled API changes in this revision.
Support for storing refresh token in a cookie.no API changesDocs b9b6b012026-05-27 21:43
Add revoke refresh token/tracker on logout (#1211)2Docs 1a9b880 2026-05-08 18:04
Change detail
2 changes across 1 operation
- POST/logout
  info
  added optional request body
  info
  added the non-success response with the status
Refresh Token feature. (#1207)9Docs f28bdbd 2026-05-02 03:09
Change detail
9 changes across 9 operations
- POST/change
  info
  added the optional property /// to the response with the status
- POST/login
  info
  added the optional property /////////// to the response with the status
- POST/refresh-token
  info
  endpoint added
- POST/tf-validate
  info
  added the optional property /////// to the response with the status
- POST/us-signin
  info
  added the optional property /////////// to the response with the status
- POST/us-verify
  info
  added the optional property /////// to the response with the status
- POST/verify
  info
  added the optional property /////// to the response with the status
- POST/wan-signin/{token}
  info
  added the optional property /// to the response with the status
- POST/wan-verify/{token}
  info
  added the optional property /////// to the response with the status
Add additional values for JSON responses when setting up an authenticater (#1191)4Docs fd57af8 2026-03-23 23:20
Add support for using Social Login (OAuth) for reauthentication (verify). (#1183)6Docs 8257549 2026-03-06 14:55
Add API (method in UserMixin) to enable fine-tuned two-factor requirements. (#1170)no API changesDocs 41ea63c2026-01-24 21:24
Support forgot password (/reset) for authenticated users also. (#1137)2Docs d26bd4d 2025-11-02 18:32
Flip USE_REGISTER_V2 to true. (#1112)no API changesDocs 30bf9962025-08-04 23:47
Improve templates - grammar, spelling, better formatting for xlation (#1071)no API changesDocs d23a90c2025-02-08 15:22
Add change username endpoint/view/feature (#1060)14Docs b91a851 2025-01-14 15:24
feat(recoverable): Add support for username recovery via simple login flows (#1041)2Docs 9950c54 2024-12-30 06:01
Update to new home - pallets-eco (#1015)no API changesDocs 3755a442024-07-31 17:07
Add tf-setup endpoint that uses a state_token. (#991)12Docs 147a612 2024-06-18 03:44
Update /login and /us-signin to have the same behavior when called by an already authenticated user. They were similar - now identical. (#986)133Docs 80a7139 2024-06-13 21:42
Improve docs (#977)22Docs 9616b52 2024-05-19 00:18
Add support for changing email. (#974)3Docs 442faf3 2024-05-14 17:41
Chore - tests and docs (#930)2Docs e423abd 2024-02-21 17:55
Two-factor simplification and improvements. (#899)3Docs 5796c18 2024-01-05 19:03
oauth improvements. (#895)1Docs 2e98833 2023-12-28 20:51
Fix tf-validate returning authorization_token. (#864)361103Docs 98ef2e5 2023-10-22 15:25
TWO_FACTOR_VALIDITY changes. (#823)5Docs 9dcf7ec 2023-07-25 01:52
Change confirmation to default to NOT auto-login. (#820)no API changesDocs 58f93ef2023-07-22 22:49
Improve /confirm w.r.t. OWASP (#817)no API changesDocs bf59f632023-07-19 21:34
Improve /reset w.r.t. OWASP (#816)112Docs ed5c824 2023-07-19 18:17
Support for 'social'/OAuth authentication. (#716)2Docs 286a8d0 2022-12-23 02:13
Completely change json error response (#638)436266Docs 693a084 2022-07-22 01:09
Add support for two-factor recovery codes. (#630)2412Docs fc6401d 2022-06-18 02:20
Improve empty password support. (#627)1Docs 12f6f9b 2022-05-31 21:50
Improve username support. (#625)21Docs ebbc0e9 2022-05-26 21:43
Implement ability to delete a previously setup unified sign in method. (#609)84Docs b036528 2022-04-24 21:23
Update swagger doc with Webauthn. (#603)692049Docs 531057c 2022-04-11 13:10
Documentation changes for /login CSRF vulnerability. (#424)1Docs 19ef6cf 2021-01-05 23:14
Fix security vuln - QRcodes were available via GET on /qrcode - not protected with CSRF tokens (#423)27Docs 183a826 2021-01-04 22:04
Add a 2FA Validity Window (#401)6Docs a3ee327 2020-10-21 01:41
Improve two-factor JSON and tests. (#382)712Docs 5150140 2020-08-31 01:50
Remove all requirements of 'email' as a USER_IDENTITY_ATTRIBUTE. (#358)9Docs 44459d6 2020-07-16 01:54
Require fs_uniquifier and stop referencing the UserModel PK. (#339)99Docs ad4aef1 2020-06-15 01:47
First pass - remove py2.7 and <3.6 support. (#321)no API changesDocs 0c232782020-05-15 01:31
Move repo.no API changesDocs aa992bf2020-04-30 13:55
Fixes to us sign in (#303)136Docs 89aac47 2020-04-17 23:19
Generate new totp secret on each setup (#292)2Docs 8229244 2020-03-25 20:05
Add config such that /us-signin becomes the default for /login. (#291)11Docs ac5c84b 2020-03-25 01:37
More unified sign in polishing. (#288)814Docs da87305 2020-03-15 20:11
Fix post-login redirect for already authenticated users. (#222)no API changesDocs a28e2f92019-12-03 02:19
chore: Update/improve docs (#177)718Docs 1735ec5 2019-09-11 19:03
Changes the way json's are rendered when json is wanted by the requester (#167)no API changesDocs 2b044042019-09-11 18:00

Show older

Change detail

Change detail

Change detail

Change detail