| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: python313-django-allauth-steam | Distribution: openSUSE Tumbleweed |
| Version: 65.18.0 | Vendor: openSUSE |
| Release: 1.2 | Build date: Sat Jun 20 19:53:06 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 0 | Source RPM: python-django-allauth-65.18.0-1.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://allauth.org | |
| Summary: Django allauth - Steam provider (OpenID-compliant) | |
Python extra dependency `steam` for python-django-allauth.
MIT
* Sat Jun 20 2026 Dirk Müller <dmueller@suse.com>
- update to 65.18.0:
* The password2 (password confirmation) field on the
set/change/reset password forms now carries
autocomplete="new-password", matching password1. This allows
browser and password manager "suggest strong password"
features to fill both fields as a pair.
* IdP: Added support for Dynamic Client Registration.
* IdP: Added support for client_secret_basic.
* IdP: Added support for Resource Indicators (RFC 8707).
* IdP: The .well-known/openid-configuration endpoint previously
derived response_types_supported and grant_types_supported
from configured clients. Per RFC 8414, these fields should
reflect server capabilities, not the configuration of
existing clients. They are now statically derived.
Additionally, scopes_supported is now included. Use the new
populate_server_metadata() adapter method to customize the
metadata.
* Added new socialaccount provider: Klaviyo.
* Rate limiting now truncates IPv6 addresses to their network
prefix (default /64) to prevent bypass via address rotation.
Configurable via ALLAUTH_RATE_LIMIT_IPV6_PREFIX.
* Added authenticate_by_email hook to
DefaultSocialAccountAdapter, allowing customization of user
lookup and email matching during social login.
* BitBucket: When using the BitBucket API, the token is passed
in the headers instead of the query parameters, which no
longer works since May 4th, 2026 (deprecation notice).
* Sun Apr 26 2026 Dirk Müller <dmueller@suse.com>
- update to 65.16.1:
* The state parameter is a critical part of the OAuth2
handshake, used to prevent CSRF attacks. The Edx, AngelList
and Questrade providers were originally added without state
support, as these providers did not support it at the time.
Edx and Questrade have since added support, so their
configuration has been updated accordingly. AngelList is no
longer operational and has been removed. Thanks to Adil
Ahmadzada for reporting.
* MFA: You can now configure recovery codes to be only shown
once (MFA_RECOVERY_CODES_SHOW_ONCE = True).
* New signals for audit trail purposes: login_code_rejected,
password_reset_code_rejected,
email_verification_code_rejected (in allauth.account.signals)
and authentication_failed (in allauth.mfa.signals).
* Fri Apr 03 2026 Dirk Müller <dmueller@suse.com>
- update to 65.15.1:
* The context data for the various entrance views was
inconsistent, e.g. some where missing site or login_url.
Ensured all entrance views are now handed over the same base
context.
* MFA: accessing the WebAuthn login view while already being
authenticated resulted in a 500, fixed.
* OAuth 1.0: Fixed an argument call order issue when performing
requests.
* Sat Mar 21 2026 Dirk Müller <dmueller@suse.com>
- update to 65.15.0:
* All user facing codes (e.g. those that the user needs to
manually input over at password reset, email/phone
verification, login code, OIDC device codes) now follow the
recommendations over at RFC 8628, Section 6.1. It uses
dashed codes, such as "WDJB-MJHT", by default. You can
control the format of all codes via a new setting
ALLAUTH_USER_CODE_FORMAT`, or, adjust the format per use case
via one of ACCOUNT_LOGIN_BY_CODE_FORMAT,
ACCOUNT_PHONE_VERIFICATION_CODE_FORMAT,
ACCOUNT_PASSWORD_RESET_BY_CODE_FORMAT,
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_FORMAT,
IDP_OIDC_USER_CODE_FORMAT.
* Added optional support for requesting new login codes. See
ACCOUNT_LOGIN_BY_CODE_SUPPORTS_RESEND.
* Dropped support for Python 3.8 and 3.9. Both these Python
versions are end-of-life.
* Tue Mar 03 2026 Andreas Schneider <asn@cryptomilk.org>
- Update to version 65.14.3 (
bsc#1255011, CVE-2025-65430,
bsc#1255012, CVE-2025-65431):
* See https://github.com/pennersr/django-allauth/blob/65.14.3/ChangeLog.rst
or the packaged ChangeLog.rst file.
* Sun Jun 23 2024 Andreas Schneider <asn@cryptomilk.org>
- Update to version 0.63.3
* See https://github.com/pennersr/django-allauth/blob/0.63.3/ChangeLog.rst
or the packaged ChangeLog.rst file.
- Updated missing-template-in-test.patch
* Sat Jan 20 2024 Dirk Müller <dmueller@suse.com>
- update to 0.60.1:
* User sessions: after changing your password in case of
ACCOUNT_LOGOUT_ON_PASSWORD_CHANGE = False, the list of
sessions woud be empty instead of showing your current
session.
* SAML: accessing the SLS/ACS views using a GET request would
result in a crash (500).
* SAML: the login view did not obey the
SOCIALACCOUNT_LOGIN_ON_GET = False setting.
* Mon Jan 08 2024 Dirk Müller <dmueller@suse.com>
- update to 0.60.0:
* Google One Tap Sign-In is now supported.
* You can now more easily change the URL to redirect to after a
successful password change/set via the newly introduced
get_password_change_redirect_url() adapter method.
* You can now configure the primary key of all models by
configuring ALLAUTH_DEFAULT_AUTO_FIELD, for example to:
"hashid_field.HashidAutoField".
* You can now specify the URL path prefix that is used for all
OpenID Connect providers using
SOCIALACCOUNT_OPENID_CONNECT_URL_PREFIX. By default, it is
set to "oidc", meaning, an OpenID Connect provider with
provider ID foo uses /accounts/oidc/foo/login/ as its login
URL. Set it to empty ("") to keep the previous URL structure
(/accounts/foo/login/).
* The SAML default attribute mapping for uid has been changed
to only include urn:oasis:names:tc:SAML:attribute:subject-id.
If the SAML response does not contain that, it will fallback
to use NameID.
* Thu Dec 14 2023 Dirk Müller <dmueller@suse.com>
- update to 0.59.0:
* The MFA authenticator model now features "created at" an
"last used "at" timestamps.
* The MFA authenticator model is now registered with the Django
admin.
* Added MFA signals emitted when authenticators are added,
removed or (in case of recovery codes) reset.
* There is now an MFA adapter method
``can_delete_authenticator(authenticator)``
available that can be used to prevent users from deactivating
e.g. their TOTP authenticator.
* Added a new app, user sessions, allowing users to view a list
of all their active sessions, as well as offering a means to
end these sessions.
* A configurable timeout (``SOCIALACCOUNT_REQUESTS_TIMEOUT``)
is now applied to all upstream requests.
* Added a setting ``ACCOUNT_EMAIL_UNKNOWN_ACCOUNTS`` to disable
sending of emails to unknown accounts.
* You can now override the MFA forms via the ``MFA_FORMS``
setting.
* Fri Nov 10 2023 Dirk Müller <dmueller@suse.com>
- update to 0.58.2:
* Added rate limiting to the MFA login form.
* Mon Nov 06 2023 Marcus Rueckert <mrueckert@suse.de>
- make it easier to notice to keep buildrequires and runtime
requires version limits in sync. This will also help us to notice
early when the version of other libraries do not match the
requires encoded in the source code.
* Thu Nov 02 2023 Andreas Schneider <asn@cryptomilk.org>
- Update to v0.58.1
* See https://github.com/pennersr/django-allauth/blob/0.58.1/ChangeLog.rst
or the ChangeLog.rst included in this package
* Sat Jul 29 2023 Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
- Update to v0.54.0
* skips multiple versions, reference
https://github.com/pennersr/django-allauth/commits/0.54.0
- Patch out test which cannot run without template files (missing-template-in-test.patch)
* Sun Jun 25 2023 Andreas Schneider <asn@cryptomilk.org>
- Use sle15_python_module_pythons
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 01:28:36 2026