Skip to content

Releases: auth0/auth0-fastapi-api

1.0.0b7

09 Apr 15:36
5cb9128

Choose a tag to compare

Added

1.0.0b6

17 Mar 10:31
8e9e748

Choose a tag to compare

Fixed

1.0.0b5

20 Nov 15:51
eba339f

Choose a tag to compare

What's New

This beta release adds DPoP (Demonstrating Proof-of-Possession) authentication support with some important behavioral changes.

New Features

DPoP Authentication Support #50 (kishore7snehil)

  • Enhanced security through cryptographic proof-of-possession
  • Auto-detection of Bearer vs DPoP authentication schemes
  • Mixed mode: accepts both token types by default for easy migration
  • Configuration options: dpop_enabled, dpop_required, dpop_iat_leeway, dpop_iat_offset

Important Changes for This Beta

Dependency Update

  • Now requires auth0-api-python >= 1.0.0b6

Default Behavior

  • DPoP support is enabled by default (dpop_enabled=True)
  • To disable: set dpop_enabled=False when initializing Auth0FastAPI

Reverse Proxy Deployments

  • If behind a reverse proxy (nginx, ALB, etc.), set app.state.trust_proxy = True for proper URL validation
  • Example:
    app = FastAPI()
    app.state.trust_proxy = True

1.0.0b4

01 Oct 14:19
6435b5f

Choose a tag to compare

Added

  • Add token vault subject_token_type access_token to fast api sdk by @adamjmcgrath in #25

1.0.0b3

17 Jun 17:45
0f24a51

Choose a tag to compare

Merge fb115cd640929d6302e7d41109a934ac400c2e12 into 63f6e809d6c52c038…