requests-oauthlib

Fix #540 with v1.4.1 preparation with 1.3.1 baseline

• Version 2.0.0 published initially as 1.4.0, it was yanked eventually.

What's Changed

• Add Support for OAuth Mutual TLS (draft-ietf-oauth-mtls) by @danielfett in #389
• Linkedin compliance removal & LinkedIn Example update/fix by @jtroussard in #397
• docs: Fix typos in token refresh section of oauth2 worflow by @momobel in #413
• Add eBay compliance fix by @craiga in #456
• Fix Docs generation - Improve Pipeline by @JonathanHuot in #459
• Fix Sphinx error for oauth1 fetch_token documentation by @JonathanHuot in #462
• Move from Travis to GitHub Actions by @JonathanHuot in #470
• Add Spotify OAuth 2 Tutorial by @odysseusmax in #471
• Update documentation for Python 3 by @gschizas in #435
• docs: add the link to the Application Registration Portal by @Abdelkrim in #425
• docs: rearrange and link spotify tutorial by @odysseusmax in #472
• Update google.rst by @mrwangjianhui in #454
• Add Python 3.8 & 3.9 as supported versions by @kaxil in #442
• Update build badge for GitHub Actions by @hugovk in #475

New Contributors

• @danielfett made their first contribution in #389
• @jtroussard made their first contribution in #397
• @momobel made their first contribution in #413
• @craiga made their first contribution in #456
• @JonathanHuot made their first contribution in #459
• @odysseusmax made their first contribution in #471
• @gschizas made their first contribution in #435
• @Abdelkrim made their first contribution in #425
• @mrwangjianhui made their first contribution in #454
• @kaxil made their first contribution in #442
• @hugovk made their first contribution in #475

Full Changelog: v1.3.0...v1.3.1

• Instagram compliance fix
• Added force_querystring argument to fetch_token() method on OAuth2Session

• This project now depends on OAuthlib 3.0.0 and above. It does not support
  versions of OAuthlib before 3.0.0.
• Updated oauth2 tests to use 'sess' for an OAuth2Session instance instead of auth
  because OAuth2Session objects and methods acceept an auth paramether which is
  typically an instance of requests.auth.HTTPBasicAuth
• OAuth2Session.fetch_token previously tried to guess how and where to provide
  "client" and "user" credentials incorrectly. This was incompatible with some
  OAuth servers and incompatible with breaking changes in oauthlib that seek to
  correctly provide the client_id. The older implementation also did not raise
  the correct exceptions when username and password are not present on Legacy
  clients.
• Avoid automatic netrc authentication for OAuth2Session.

• Adjusted version specifier for oauthlib dependency: this project is
  not yet compatible with oauthlib 3.0.0.
• Dropped dependency on nose.
• Minor changes to clean up the code and make it more readable/maintainable.

• Removed support for Python 2.6 and Python 3.3.
  This project now supports Python 2.7, and Python 3.4 and above.
• Added several examples to the documentation.
• Added plentymarkets compliance fix.
• Added a token property to OAuth1Session, to match the corresponding
  token property on OAuth2Session.

• Added Fitbit compliance fix.

• Fixed an issue where newlines in the response body for the access token request would cause errors when trying to extract the token.

• Fixed an issue introduced in v0.7.0 where users passing auth to several methods would encounter conflicts with the client_id and client_secret-derived auth. The user-supplied auth argument is now used in preference to those options.

• Allowed OAuth2Session.request to take the client_id and client_secret parameters for the purposes of automatic token refresh, which may need them.

• Use client_id and client_secret for the Authorization header if provided.

• Allow explicit bypass of the Authorization header by setting auth=False.

• Pass through the proxies kwarg when refreshing tokens.

• Miscellaneous cleanups.

• Fixed a bug when sending authorization in headers with no username and password present.

• Make sure we clear the session token before obtaining a new one.

• Some improvements to the Slack compliance fix.

• Avoid timing problems around token refresh.

• Allow passing arbitrary arguments to requests when calling fetch_request_token and fetch_access_token.

• Add compliance fix for Slack.

• Add compliance fix for Mailchimp.

• TokenRequestDenied exceptions now carry the entire response, not just the status code.

• Pass through keyword arguments when refreshing tokens automatically.

• Send authorization in headers, not just body, to maximize compatibility.

• More getters/setters available for OAuth2 session client values.

• Allow sending custom headers when refreshing tokens, and set some defaults.

• Fix TypeError being raised instead of TokenMissing error.

• Raise requests exceptions on 4XX and 5XX responses in the OAuth2 flow.

• Avoid AttributeError when initializing the OAuth2Session class without complete client information.

• New authorized property on OAuth1Session and OAuth2Session, which allows you to easily determine if the session is already authorized with OAuth tokens or not.

• New TokenMissing and VerifierMissing exception classes for OAuth1Session: this will make it easier to catch and identify these exceptions.

• New install target [rsa] for people using OAuth1 RSA-SHA1 signature method.

• Fixed bug in OAuth2 where supplied state param was not used in auth url.

• OAuth2 HTTPS checking can be disabled by setting environment variable OAUTHLIB_INSECURE_TRANSPORT.

• OAuth1 now re-authorize upon redirects.

• OAuth1 token fetching now raise a detailed error message when the response body is incorrectly encoded or the request was denied.

• Added support for custom OAuth1 clients.

• OAuth2 compliance fix for Sina Weibo.

• Multiple fixes to facebook compliance fix.

• Compliance fixes now re-encode body properly as bytes in Python 3.

• Logging now properly done under requests_oauthlib namespace instead of piggybacking on oauthlib namespace.

• Logging introduced for OAuth1 auth and session.

• OAuth1Session methods only return unicode strings. #55.

• Renamed requests_oauthlib.core to requests_oauthlib.oauth1_auth for consistency. #79.

• Added Facebook compliance fix and access_token_response hook to OAuth2Session. #63.

• Added LinkedIn compliance fix.

• Added refresh_token_response compliance hook, invoked before parsing the refresh token.

• Correctly limit compliance hooks to running only once!

• Content type guessing should only be done when no content type is given

• OAuth1 now updates r.headers instead of replacing it with non case insensitive dict

• Remove last use of Response.content (in OAuth1Session). #44.

• State param can now be supplied in OAuth2Session.authorize_url