Skip to content

Releases: 255BITS/pg-simple-auth

Fix password reset flow - v0.1.2

07 Sep 21:19
Compare
Choose a tag to compare

Simple fix needed for password reset.

Oauth Support - v0.1.1

04 Sep 05:38
Compare
Choose a tag to compare

New Features:
OAuth Support:

Added OAuth authentication functionality to the library, allowing users to sign up and log in via OAuth providers.
New methods:
login_oauth(provider, oauth_id): Log in using an OAuth provider and OAuth ID.
signup_oauth(provider, oauth_id, **insert_args): Sign up using an OAuth provider and OAuth ID, with support for additional user attributes.
Custom Errors:

Introduced UserExistsError, a custom error class that is raised when a user already exists during the sign-up process.
Refinements to Database Schema:

Added new columns to the user table to support OAuth-based sign-ins:
oauth_provider: Stores the OAuth provider used for authentication.
oauth_id: Unique ID from the OAuth provider for each user.
Updated schema migration logic to ensure smooth integration of OAuth support without affecting existing user accounts.
Password Handling Enhancements:

Strengthened the password validation mechanism by adding checks during the sign-up process.
Adjusted sign-up function to dynamically handle additional insert arguments for flexibility.
JWT Enhancements:

Updated JWT generation (_generate_jwt) to handle optional email fields, which is particularly useful for OAuth-based sign-ups where an email might not always be provided.
Bug Fixes:
Fixed a minor issue with SQL query formatting when dealing with table names containing the public schema.
Deprecations:
None.

Initial Release - v0.1.0

03 Sep 03:50
Compare
Choose a tag to compare

This is the first release of pg_simple_auth, a lightweight and secure authentication module designed for asynchronous Python applications using PostgreSQL and Quart. This release introduces a straightforward yet robust API for implementing user authentication in your projects.

Features:
Asynchronous User Authentication: Leverages asyncio and asyncpg for non-blocking operations, ensuring smooth performance in asynchronous environments.
JWT-Based Authentication: Provides secure, stateless user sessions using JSON Web Tokens (JWT).
Secure Password Management: Passwords are hashed using the argon2 algorithm, offering strong protection against attacks.
Built-in Email Verification: Includes functionality for email verification, enhancing the security of user accounts.
This initial release is designed to offer the essential tools for integrating user authentication into your Quart applications with minimal configuration and maximum security.