Skip to content

7.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Nov 19:02
· 14 commits to master since this release
Immutable release. Only release title and notes can be modified.
7.1.0
96f3bb4

Security

  • Enable PKCE by default for all Azure AD and Azure AD B2C backends, binding
    authorization codes to the initiating login transaction. In-progress Azure
    logins must restart after upgrading.
  • Require oauthlib 4.0.1 or newer to exclude versions with known vulnerabilities.
  • Require pyasn1 0.6.5 or newer in the google-onetap extra to exclude
    versions with known ASN.1 decoder denial-of-service vulnerabilities.
  • Discard a session-held partial pipeline if its initiating user differs from the
    currently authenticated user, including flows started anonymously.
Assets 5
Loading