Releases: openedx/edx-drf-extensions
Upgrade to new-style Django middleware
See https://docs.djangoproject.com/en/1.11/topics/http/middleware/#upgrading-pre-django-1-10-style-middleware for details. This release will remove many RemovedInDjango20Warning
s for clients of this library.
Fix call to is_jwt_authenticated
Fix call to is_jwt_authenticated when the request has no successful_authenticator attribute
Added a helper method to get jwt token from request.auth
This release adds a helper method in edx_rest_framework_extensions/auth/jwt/authentication.py
to get decoded hwt token from request.auth
Revert 'Update cookies.get_decoded_jwt logic to also query jwt cookiefrom request.auth'
Revert 'Update cookies.get_decoded_jwt logic to also query jwt cookiefrom request.auth'
Updated cookies.get_decoded_jwt logic to also query jwt cookie from request.auth
This release updates the logic of edx_rest_framework_extensions.auth.jwt.cookies.get_decoded_jwt
so that jwt cookie is queried in request.auth
if not found in request.COOKIES
.
add get_decoded_jwt from jwt cookie in request
Bumping version to support JWT version 1.2.0
This release bumps the version of default_latest_supported
value to 1.2.0
It should be noted that there was a user_id jwt claim added to edx-platform while at version 1.1.0, however the version of the jwt was not bumped at that time.
Remove backward compatible auth imports.
Several auth classes and methods were refactored and the
backward incompatible imports have been removed.
Important: SessionAuthenticationAllowInactiveUser was moved as
part of this release, so this release also adds a backward
incompatible change from any earlier version as well.
Add CSRF API.
1.11.0 Add csrf API.
Added SessionAuthenticationAllowInactiveUser
Added SessionAuthenticationAllowInactiveUser to support authentication of inactive users on mobile devices.