jazzband/django-oauth-toolkit 2.2.0

Release 2.2.0

on GitHub

[2.2.0] 2022-10-18

WARNING

Issues caused by Release 2.0.0 breaking changes continue to be logged. Please make sure to carefully read these release notes before
performing a MAJOR upgrade to 2.x.

These issues both result in {"error": "invalid_client"}:

1. The application client secret is now hashed upon save. You must copy it before it is saved. Using the hashed value will fail.

2. PKCE_REQUIRED is now True by default. You should use PKCE with your client or set PKCE_REQUIRED=False if you are unable to fix the client.

Added

• #1208 Add 'code_challenge_method' parameter to authorization call in documentation
• #1182 Add 'code_verifier' parameter to token requests in documentation

Changed

• #1203 Support Django 4.1.

Fixed

• #1203 Remove upper version bound on Django, to allow upgrading to Django 4.1.1 bugfix release.
• #1210 Handle oauthlib errors on create token requests