Skip to content

CHANGELOG.md

Latest commit

 

History

History
107 lines (83 loc) · 4.57 KB

CHANGELOG.md

File metadata and controls

107 lines (83 loc) · 4.57 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.1.0] - 2026-03-10

  • Add support for ES* algorithms (ES256, ES384, ES512) for EC keys in JWK, JWKS, and AsymmetricJWTValidator.
  • Fix flaky test test_jwt_validator_fetches_tokens_again_for_unknown_kid that failed on slower hardware (e.g. Raspberry Pi / aarch64) due to a timing-sensitive refresh_time threshold; replaced real-time sleeps with mocked time for deterministic behaviour. Reported by @wrobell in #18.

[1.0.4] - 2025-10-18 🎹

  • Add a guardpost.protection namespace with classes offering a strategy for brute-force protection against authentication attempts, and to log all failed authentication attempts consistently.
  • Add an InvalidCredentialsError exception. AuthenticationHandler implementations can raise InvalidCredentialsError when invalid credentials are provided, to enable automatic logging and, if enabled, brute-force protection.
  • Add RateLimiter class that can block authentication attempts after a configurable threshold is exceeded. By default stores failed attempts in-memory.
  • Integrate RateLimiter into AuthenticationStrategy with automatic tracking of failed authentication attempts and support for blocking excessive requests.
  • Add Python 3.14 and remove 3.9 from the build matrix.
  • Drop support for Python 3.9 (it reached EOL in October 2025).
  • Add an optional dependency on essentials, to use its Secret class to handle secrets for JWT validation with symmetric encryption. This is useful to support rotating secrets by updating env variables.
  • Improve exceptions raised for invalid JWTs to include the source exception (exc.__cause__).

[1.0.3] - 2025-10-04 🔱

  • Add a roles property to the Identity object.
  • Add a RolesRequirement class to authorize by sufficient roles (any one is enough).
  • Add support for validating JWTs signed using symmetric encryption (SymmetricJWTValidator and AsymmetricJWTValidator).
  • Add support to call the authorize method with an optional set of roles, treated as sufficient roles to succeed authorization.
  • Add Python 3.12 and 3.13 to the build matrix.
  • Remove Python 3.8 from the build matrix.
  • Improve pyproject.toml.
  • Workflow maintenance.

[1.0.2] - 2023-06-16 🌽

  • Raises a more specific exception ForbiddenError when the user of an operation is authenticated properly, but authorization fails. This enables better handling of authorization error, differentiating when the user context is missing or invalid, and when the context is valid but the user has no rights to do a certain operation. See #371.

[1.0.1] - 2023-03-20 🌞

  • Improves the automatic rotation of JWKS: when validating JWTs, JWKS are refreshed automatically if an unknown kid is encountered, and JWKS were last fetched more than refresh_time seconds ago (by default 120 seconds).
  • Corrects an inconsistency in how claims are read in the User class.

[1.0.0] - 2023-01-07 ⭐

  • Adds built-in support for dependency injection, using the new ContainerProtocol in rodi v2.
  • Removes the synchronous code API, maintaining only the asynchronous code API for AuthenticationStrategy.authenticate and AuthoreoizationStrategy.authorize.
  • Replaces setup.py with pyproject.toml.
  • Reduces imports verbosity.
  • Improves the identity_getter code API.
  • Corrects Identity.__getitem__ to raise KeyError if a claim is missing.

[0.1.0] - 2022-11-06 🐍

  • Workflow maintenance.

[0.0.9] - 2021-11-14 🦢

  • Adds sub, access_token, and refresh_token properties to the Identity. class
  • Adds py.typed file.

[0.0.8] - 2021-10-31 🛡️

  • Adds classes to handle JWTs validation, but only for RSA keys.
  • Fixes issue (wrong arrangement in test) #5.
  • Includes Python 3.10 in the CI/CD matrix.
  • Enforces black and isort in the CI pipeline.

[0.0.7] - 2021-01-31 🍇

  • Corrects a bug in the Policy class (#2).
  • Changes the type annotation of Identity claims (#3).

[0.0.6] - 2020-12-12 :octocat:

  • Completely migrates to GitHub Workflows.
  • Improves build to test Python 3.6 and 3.9.
  • Adds a changelog.
  • Improves badges.
  • Improves code quality using flake8 and black.