Sponsoring

• Marco 'Lubber' Wienkoop for his work on Fomantic-UI, a nice CSS framework we use in canaille. Fomantic-UI is used on other tools we rely on, like Forgejo.
• Hsiaoming Yang for his work on authlib, a python authentication library we use in canaille.

django-sesame

Frictionless authentication with “Magic Links” for Django project

• Use f-string for exception messages

Magic-Wormhole

Get files from one computer to another, safely

• Remove 'u' prefix to strings for the client and the relay server
• Use classes directly instead of type() calls for the client and the mailbox server
• Update documentation (remove details about python2 types, update minimal Python version in README.md and update tox URL)
• Replace formatted strings to f-strings

PSPSDK

Collection of tools and libraries written for Sony's Playstation Portable (PSP) gaming console

• Fix CMake deprecation warnings
• Search improvement and link to constants in documentation generated by Doxygen
• Fix obsolete tags warnings in documentation generated by Doxygen
• Move generated documentation in dedicated directory to avoid to delete a file involuntary
• Add Code of Conduct in generated documentation in documentation generated by Doxygen
• Delete unused macros (1 and 2) and unused variables (1 et 2)
• Only one constant definition
• Replace a statement by an assigment
• Fix goal of the file in the header comment

dramatiq

A fast and reliable background task processing library for Python 3.

• Make the Prometheus dependency optional

pytest-scim2-server

SCIM2 server fixture for Pytest

We released 3 new versions during this season.

• Option to disable server logging

authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.

We released 2 new versions during this season.

• Fix invalid characters in error descriptions
• Forbid URL fragments in redirection URIs
• Allow request_object_signing_alg_values_supported to not contain 'none' and 'RS256'
• Fix an issue when RFC9207 is enabled and the authorization response is not a 302
• Use tox-uv and pre-commit-uv
• Update Flask OAuth2 example to show error management
• Example for RFC7591 generate_client_registration_info usage
• Support for 'acr' and 'amr' claims in id_token
• Remove deprecated check_token_endpoint_auth_method method
• Use pytest style assertions in the test suite
• Deprecate passing non OAuth2Request objects in create_authorization_request
• Implement RFC9101 JWT secured authentication requests (JAR)
• Add codespell pre-commit
• Fix missing 'state' param in authorization error responses
• Fix response_types order unwanted strictness during dynamic client registration
• unsupported_response_type errors are redirected
• Update links to match the new repository URL
• Skip xc20p algorithm unit tests when unavailable in cryptodome
• OIDC userinfo endpoint support
• Clarify the license permissions

joserfc

Implementations of JOSE RFCs in Python

• Respect RFC6749 character set in error descriptions
• Pre-commit configuration
• Add a tox configuration

pytest-iam

A lightweight and fully functional OAuth2 / OpenID Connect (OIDC) / SCIM server to be used in test suites.

We released 3 new versions during this season.

• Implement an embedded test client

otpauth

Implements two-step verification of HOTP/TOTP. Also known as one time password.

• Handle non-ascii characters

webtest

Wraps any WSGI application and makes it easy to send test requests to that application, without starting up an HTTP server.

• Strip HTML option tag text

scim2-filter-parser

A customizable parser/transpiler for SCIM2.0 filters

• Fix a typo in the README

Canaille

Lightweight identity and authorization management software

We released 8 new versions during this season.

• Better configuration defaults
• Fix the phone number HTMX form raising a 400 error
• Fix client JWT authentication for OIDC refresh_token and password grants
• Ensure id_token has a kid header
• Support for POST method at the Authorization endpoint
• Implement OIDC login and consent prompts
• Clients without scope defined don't restrict scopes for token emission
• Fix userinfo 'address' claim
• Implement RFC9101 JWT-Secured Authorization Request (JAR)
• Implement the UserInfo endpoint with Authlib
• Rework the JWKS configuration
• Authentication process overhaul
• Fix the email field focus with HTMX