All notable changes to this project will be documented in this file.
No unreleased changes.
- Reverted Django version requirement back to 3.2.
- Added utility functions for managed app installation.
- Shopify UI extensions send tokens without iss key. To prevent the middleware from raising exceptions for these requests we're now ignoring missing iss key.
- Removed support for cookie based embedded apps.
- Migrate redirect calls to App Bridge 3.
- The template
iframe_redirect.html
now expectshost
parameter, notshop
. session_tokens.views.get_scope_permission
now detectsembedded
query parameter.session_tokens.views.FinalizeAuthView
now redirects to the domain defined inhost
query parameter if present.
- Don't escape redirect_uri in iframe_redirect.html. Shopify gracefully handles HTML encoded URLs, but occasionally it doesn't.
- Update URL definitions to be compatible with Django 4.
- Migrate redirect calls to App Bridge.
- Added function allowing to get the user instance using the session token string.
- Added session_tokens app specific
context_processors
.
- Added a way to customize user creation.
- Session Token Auth now supports App Bridge 2.
- Fixed session tokens DRF backend authentication return value.
- Added support for session token auth.
- Add forgotten dependency and update other ones.
- Fix issue where
next
parameter wasn't honored whenSHOPIFY_APP_THIRD_PARTY_COOKIE_CHECK
is enabled.
- Added a middleware to accommodate changes to SameSite policy.
- 3rd party cookie check is now disabled by default as it doesn't pass Shopify's review check.
- Increased the token field max_length
- Updated test matrix to test only supported Django and Python versions
- Added a mixin which verifies that the current shop is authenticated and app is installed in shopify.
- Dropped support for Django 1.x
- Detection if third party cookies are allowed
- Dropped support for Python 3.4
- Support for Django 3 by removing Python 2 support
- Dropped support for Python 2
- Support for
return_to
redirect parameter. - Added Django v2.1, v2.2 and v2.3 to test matrix.
- Support for deprecated Django versions 1.x.
- Added support for Shopify API versioning.
- Added support for Django 2.0.
- Improved support for later Django versions
- Support for deprecated Django versions 1.7, 1.9
- Removed Python 3.3 from test matrix
- Updated authentication redirect for Chrome
postMessage
change
- Bugfix with items()/iteritems() dependence in
login_required
decorator
- Django 1.10 support
- Dependence on
six
package
- Fix OAuth regression
- Include templates in package
- Actual Django 1.9 compatibility
- Django 1.9 compatibility
- Better PEP8 conformity
- More Python 3 support
- Improve Python 3 support
- Updated ShopifyAPI dependency to v2.1.2
- This new-format CHANGELOG, based on http://keepachangelog.com
- AbstractShopUser.token now has a default value to allow easy resetting
- Improvements to README
- Context processor to add common variables to templates
- Major rewrite and update of README
- Support for Django 1.7
- A
login_required
decorator to handle passing off Shopify authentication parameters to the login URL
- Support for any version of Django < 1.7
- Numerous issues with packaging and distribution of templates
- Move imports inside initialize() method so that we don’t break things on initial setup
- Added
api
module for TastyPie-supported models - Initialise properly
- Add dynamic
session
property to user
- Swapped to setuptools for distribution
- Initial package structure
- Custom models and decorators to support Shopify authentication