Skip to content

Commit 025cd1b

Browse files
authored
Release 2.0.0 (#1145)
1 parent e8d0ee6 commit 025cd1b

File tree

2 files changed

+6
-5
lines changed

2 files changed

+6
-5
lines changed

CHANGELOG.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
1616

1717
## [unreleased]
1818

19-
## [2.0.0] unreleased
19+
## [2.0.0] 2022-04-24
20+
21+
This is a major release with **BREAKING** changes. Please make sure to review these changes before upgrading:
2022

2123
### Added
2224
* #1106 OIDC: Add "scopes_supported" to the [ConnectDiscoveryInfoView](https://django-oauth-toolkit.readthedocs.io/en/latest/oidc.html#connectdiscoveryinfoview).
@@ -28,8 +30,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
2830
* #1129 (**Breaking**) Changed default value of PKCE_REQUIRED to True. This is a **breaking change**. Clients without
2931
PKCE enabled will fail to authenticate. This breaks with [section 5 of RFC7636](https://datatracker.ietf.org/doc/html/rfc7636)
3032
in favor of the [OAuth2 Security Best Practices for Authorization Code Grants](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#section-2.1).
31-
If you want to retain the pre-2.x behavior, set `PKCE_REQUIRED = False ` in your settings.py
32-
33+
If you want to retain the pre-2.x behavior, set `PKCE_REQUIRED = False` in your settings.py
3334
* #1093 (**Breaking**) Changed to implement [hashed](https://docs.djangoproject.com/en/stable/topics/auth/passwords/)
3435
client_secret values. This is a **breaking change** that will migrate all your existing
3536
cleartext `application.client_secret` values to be hashed with Django's default password hashing algorithm
@@ -43,7 +44,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
4344

4445
### Fixed
4546
* #1108 OIDC: Fix `validate_bearer_token()` to properly set `request.scopes` to the list of granted scopes.
46-
* #1132: Fixed help text for `--skip-authorization` argument of the `createapplication` management command
47+
* #1132: Fixed help text for `--skip-authorization` argument of the `createapplication` management command.
4748

4849
### Removed
4950
* #1124 (**Breaking**, **Security**) Removes support for insecure `urn:ietf:wg:oauth:2.0:oob` and `urn:ietf:wg:oauth:2.0:oob:auto` which are replaced

oauth2_provider/__init__.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
import django
22

33

4-
__version__ = "1.7.1"
4+
__version__ = "2.0.0"
55

66
if django.VERSION < (3, 2):
77
default_app_config = "oauth2_provider.apps.DOTConfig"

0 commit comments

Comments
 (0)