v1.1.1

Features:

• Add message explaining that this project is not maintained

v1.1.0

Improvements:

• Drop support for Python 2.6
• Drop support for Python 3.2
• Drop support for Python 3.3
• Add error message to response for bad redirect URIs

Bugfixes:

• Fix an exception when requesting an unknown URL on Python 3.x

v1.0.1

Bugfixes:

• Fix an error in ClientCredentialsGrant when no expiration of a token is set in the handler
• Fix an error where the body of a POST request would not be parsed if the Content-Type header contains a charset

v1.0.0

Features:

• Logging support
• Each grant accepts its own site adapter (see Migration notes)
• Tornado adapter

Improvements:

• Catch unexpected exceptions and respond with a OAuth2 'server_error'
• Declare optional dependencies in setup.py
• Move WSGI server code into its own module
• Renamed class acting as entrypoint for WSGI server from 'Server' to 'Application'
• Client Credentials Grant example
• Methods authenticate and render_auth_page of a Site Adapter accept an instance of oauth2.datatype.Client

Bugfixes:

• Fix Resource Owner Grant responding with HTTP status code '500' in case an owner could not be authorized
• Fix "scope" parameter not being urlencoded

v0.7.0

Features:

• Issue a new refresh token when requesting an access token through the refresh_token grant type (@jswitzer)
• Set the expiration time of a token for each grant individually (@jswitzer)
• Create redis stores (@bhoomit)
• Create mysql stores (@wndhydrnt)

Improvements:

• Update Tornado integration docs (@kivo360)
• Add functional tests for supported storage backends. (@wndhydrnt)

Bugfixes:

• Fix WSGI adapter not passing a list of tuples as headers in Python 3. (@wndhydrnt)
• Fix request for access token responding '400: Bad Request' in Python 3. (@wndhydrnt)

v0.6.0

Features:

• Issue unique access tokens
• Define what grants a client is allowed to use

Improvements:

• Corrected class references in doc strings (Josh Johnston)
• Proper handling of errors raised by store adapters

Bugfixes:

• Added missing scopes parameter in SiteAdapter base class (Josh Johnston)
• Deleting authorization token after usage (Josh Johnston)
• Scope parameter not returned by access token response of Authorization Code Grant
• Added missing cache control headers to responses containing a token
• Fixed ClientCredentialsGrant returning a value of 0 of 'expires_in' with refresh token disabled

v0.5.0

Features:

• Added Client Credentials Grant
• Renamed oauth2.AuthorizationController to oauth2.Provider
• Added mongodb store

v0.4.0

New in version 0.4.0

• Added support for refresh tokens

v0.3.2

New in version 0.3.2

• Fixed a bug where MemcacheTokenStore saved objects instead of dictionaries.

v0.3.1

New in version 0.3.1

• Fixed a bug causing a supplied redirect uri being ignored if it is not the first entry in the list of a client object.