Releases: auth0/auth0-fastapi-api
Releases · auth0/auth0-fastapi-api
1.0.0b7
Added
- Feat: Support For Multiple Custom Domains #75 (kishore7snehil)
1.0.0b6
Fixed
- fix: loosen dependency constraints and bump CI actions #77 (kishore7snehil)
1.0.0b5
What's New
This beta release adds DPoP (Demonstrating Proof-of-Possession) authentication support with some important behavioral changes.
New Features
✨ DPoP Authentication Support #50 (kishore7snehil)
- Enhanced security through cryptographic proof-of-possession
- Auto-detection of Bearer vs DPoP authentication schemes
- Mixed mode: accepts both token types by default for easy migration
- Configuration options:
dpop_enabled,dpop_required,dpop_iat_leeway,dpop_iat_offset
Important Changes for This Beta
Dependency Update
- Now requires
auth0-api-python >= 1.0.0b6
Default Behavior
- DPoP support is enabled by default (
dpop_enabled=True) - To disable: set
dpop_enabled=Falsewhen initializing Auth0FastAPI
Reverse Proxy Deployments
- If behind a reverse proxy (nginx, ALB, etc.), set
app.state.trust_proxy = Truefor proper URL validation - Example:
app = FastAPI() app.state.trust_proxy = True
1.0.0b4
Added
- Add token vault subject_token_type access_token to fast api sdk by @adamjmcgrath in #25
1.0.0b3
Merge fb115cd640929d6302e7d41109a934ac400c2e12 into 63f6e809d6c52c038…