50 versions

• Support for storing refresh token in a cookie.no API changesb9b6b012026-05-27 21:43
• Add revoke refresh token/tracker on logout (#1211)○21a9b8802026-05-08 18:04
• Refresh Token feature. (#1207)○9f28bdbd2026-05-02 03:09
• Add additional values for JSON responses when setting up an authenticater (#1191)○4fd57af82026-03-23 23:20
• Add support for using Social Login (OAuth) for reauthentication (verify). (#1183)○682575492026-03-06 14:55
• Add API (method in UserMixin) to enable fine-tuned two-factor requirements. (#1170)no API changes41ea63c2026-01-24 21:24
• Support forgot password (/reset) for authenticated users also. (#1137)○2d26bd4d2025-11-02 18:32
• Flip USE_REGISTER_V2 to true. (#1112)no API changes30bf9962025-08-04 23:47
• Improve templates - grammar, spelling, better formatting for xlation (#1071)no API changesd23a90c2025-02-08 15:22
• Add change username endpoint/view/feature (#1060)▲1○4b91a8512025-01-14 15:24
• feat(recoverable): Add support for username recovery via simple login flows (#1041)○29950c542024-12-30 06:01
• Update to new home - pallets-eco (#1015)no API changes3755a442024-07-31 17:07
• Add tf-setup endpoint that uses a state_token. (#991)▲1○2147a6122024-06-18 03:44
• Update /login and /us-signin to have the same behavior when called by an already authenticated user. They were similar - now identical. (#986)▲1●3○380a71392024-06-13 21:42
• Improve docs (#977)▲2○29616b522024-05-19 00:18
• Add support for changing email. (#974)○3442faf32024-05-14 17:41
• Chore - tests and docs (#930)○2e423abd2024-02-21 17:55
• Two-factor simplification and improvements. (#899)○35796c182024-01-05 19:03
• oauth improvements. (#895)○12e988332023-12-28 20:51
• Fix tf-validate returning authorization_token. (#864)▲36●1○10398ef2e52023-10-22 15:25
• TWO_FACTOR_VALIDITY changes. (#823)●59dcf7ec2023-07-25 01:52
• Change confirmation to default to NOT auto-login. (#820)no API changes58f93ef2023-07-22 22:49
• Improve /confirm w.r.t. OWASP (#817)no API changesbf59f632023-07-19 21:34
• Improve /reset w.r.t. OWASP (#816)▲1●1○2ed5c8242023-07-19 18:17
• Support for 'social'/OAuth authentication. (#716)○2286a8d02022-12-23 02:13
• Completely change json error response (#638)▲43●62○66693a0842022-07-22 01:09
• Add support for two-factor recovery codes. (#630)▲2●4○12fc6401d2022-06-18 02:20
• Improve empty password support. (#627)○112f6f9b2022-05-31 21:50
• Improve username support. (#625)●2○1ebbc0e92022-05-26 21:43
• Implement ability to delete a previously setup unified sign in method. (#609)▲8○4b0365282022-04-24 21:23
• Update swagger doc with Webauthn. (#603)▲69●20○49531057c2022-04-11 13:10
• Documentation changes for /login CSRF vulnerability. (#424)●119ef6cf2021-01-05 23:14
• Fix security vuln - QRcodes were available via GET on /qrcode - not protected with CSRF tokens (#423)▲2○7183a8262021-01-04 22:04
• Add a 2FA Validity Window (#401)○6a3ee3272020-10-21 01:41
• Improve two-factor JSON and tests. (#382)●7○1251501402020-08-31 01:50
• Remove all requirements of 'email' as a USER_IDENTITY_ATTRIBUTE. (#358)●944459d62020-07-16 01:54
• Require fs_uniquifier and stop referencing the UserModel PK. (#339)▲9○9ad4aef12020-06-15 01:47
• First pass - remove py2.7 and <3.6 support. (#321)no API changes0c232782020-05-15 01:31
• Move repo.no API changesaa992bf2020-04-30 13:55
• Fixes to us sign in (#303)▲1●3○689aac472020-04-17 23:19
• Generate new totp secret on each setup (#292)●282292442020-03-25 20:05
• Add config such that /us-signin becomes the default for /login. (#291)●1○1ac5c84b2020-03-25 01:37
• More unified sign in polishing. (#288)▲8○14da873052020-03-15 20:11
• Fix post-login redirect for already authenticated users. (#222)no API changesa28e2f92019-12-03 02:19
• chore: Update/improve docs (#177)▲7●1○81735ec52019-09-11 19:03
• Changes the way json's are rendered when json is wanted by the requester (#167)no API changes2b044042019-09-11 18:00
• fix/enhancement - Fix slow auth tokens. (#164)○4ae027a52019-08-15 21:51
• Fix - don't allow re-use of confirmation token. (#137)no API changeseda0f252019-07-25 22:30
• Feature - update CSRF support. (#131)▲66●12○67063f6132019-07-23 19:01
• 2.0.0latest2026-07-17 12:08