1.3.2

What's changed

• Raised the supported Python baseline to Python 3.10.
• Added compatibility with Cryptography 49 through the unmarked cryptography>=45.0.5,<50.0.0 dependency range.
• Removed legacy Python 3.8/3.9 dependency-resolution branches and aligned package metadata, Ruff, tox, and CI with Python 3.10–3.14.
• Added negative AES-GCM/JWKS secret tests for invalid key length, malformed payloads, and authenticated-decryption failure.

Compatibility and upgrade notes

This release no longer installs on Python 3.8 or 3.9. Applications that still require those Python versions must remain on GCL IAM 1.3.1.

There are no application API changes for supported Python versions. RSA/PEM, HS256/RS256, JWKS, token handling, package builds, and dependent plugin integration were validated with Cryptography 49.

Full changelog: 1.3.1...1.3.2

1.3.1

Release 1.3.1

1.3.0

Use iam default client + Bump RA, allow to use readonly DBs

1.2.1

Move get_user_ip from exordos_core

1.2.0

GenesisCoreAuthMiddleware: Introduce Anon token mode + AnonymousToken

1.1.0

Introduce FieldsIamPermissions + Move controllers module to api

1.0.4

use uv instead pip

1.0.3

Validate JWT audience early in HttpDriver and add coverage + Bump RA …

Release 1.0.2

Changes:
- Fix functional test REST client: create_user now routes through the client wrapper so Authorization headers are injected when required.
- Update Apache 2.0 header year range in functional test client.

1.0.1

What's Changed

• Fix typing for clients.py by @gmelikov in #37

Full Changelog: 1.0.0...1.0.1