What's Changed

• Add external connection endpoints by @etaylormcgregor-stytch in https://github.com/stytchauth/stytch-python/pull/221

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.6.0...v11.7.0

What's Changed

• OIDC improvements by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/220

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.5.0...v11.6.0

What's Changed

• Fix member session return type magic links by @etaylormcgregor-stytch in https://github.com/stytchauth/stytch-python/pull/218

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.4.1...v11.5.0

What's Changed

• Add in additional SCIM Attributes to get parity to spec by @bgier-stytch in https://github.com/stytchauth/stytch-python/pull/216

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.4.0...v11.4.1

What's Changed

• Add allowed OAuth Tenants by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/214

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.3.0...v11.4.0

What's Changed

• Change chain_id to string by @jennifer-stytch in https://github.com/stytchauth/stytch-python/pull/215

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.2.0...v11.3.0

What's Changed

• [AUTH-3740] Sessions migrate endpoint by @etaylormcgregor-stytch in https://github.com/stytchauth/stytch-python/pull/212
• Add Sign in With Ethereum by @jennifer-stytch in https://github.com/stytchauth/stytch-python/pull/213

New Contributors

• @etaylormcgregor-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/212

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.1.0...v11.2.0

What's Changed

• Update slack invite links by @mruhlin-stytch in https://github.com/stytchauth/stytch-python/pull/210
• Retired Emails Changes by @jcook-stytch in https://github.com/stytchauth/stytch-python/pull/211

New Contributors

• @mruhlin-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/210
• @jcook-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/211

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v11.0.0...v11.1.0

What's Changed

• AUTH-3398: Update readme to include B2B samples by @bgier-stytch in https://github.com/stytchauth/stytch-python/pull/208
• OBACK-290: Fix issue with python Authenticate JWT locally logic by @bgier-stytch in https://github.com/stytchauth/stytch-python/pull/209

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v10.1.0...v11.0.0

What's Changed

• Support wildcard scopes in M2M auth by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/207

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v10.0.0...v10.1.0

What's Changed

• SCIM Singleton by @ollie-stytch in https://github.com/stytchauth/stytch-python/pull/206

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.6.0...v10.0.0

What's Changed

• Auth-3345: Add updated_at and created_at to organization and member models by @bgier-stytch in https://github.com/stytchauth/stytch-python/pull/203

New Contributors

• @bgier-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/203

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.5.1...v9.6.0

What's Changed

• Lazily initialize aiohttp.ClientSession by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/205

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.5.0...v9.5.1

What's Changed

• Add identity_provider to SSO connections by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/202

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.4.0...v9.5.0

What's Changed

• Bump jinja2 from 3.1.3 to 3.1.4 by @dependabot in https://github.com/stytchauth/stytch-python/pull/201
• Support dicts for complex types in API calls by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/200

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.3.1...v9.4.0

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.3.0...v9.3.1

What's Changed

• Mark access token as optional for OAuth responses by @jennifer-stytch in https://github.com/stytchauth/stytch-python/pull/199

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.2.0...v9.3.0

What's Changed

• Include member scim registrations by @taronish-stytch in https://github.com/stytchauth/stytch-python/pull/198

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.1.0...v9.2.0

What's Changed

• Zero-downtime session cutover by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/197

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v9.0.0...v9.1.0

What's Changed

• Persist async client session by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/196

Why this is a MAJOR version

This changes the semantics to create a ClientSession only once on startup instead of per-request - while the external API is the same the behavior is not backwards compatible. Are there any cases where callers would want to use (or implicitly depend on) the previous behavior? For example, if they're creating a Stytch client per-request and have a memory leak that prevents the client from getting GC'd, then we'd turn a small memory leak into a much larger one.

Out of an abundance of caution, we're making this a MAJOR version bump to avoid any unintended consequences for existing clients.

Upgrade path

This is expected to be a no-op upgrade for clients on v8.7.0. If you use the async API and want to maintain the per-request ClientSession behavior as before, please reach out and tell us about your use case so we can figure out how best to support it.

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.7.0...v9.0.0

What's Changed

• Release organization metrics API by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/195

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.6.0...v8.7.0

What's Changed

• SCIM Support by @ollie-stytch in https://github.com/stytchauth/stytch-python/pull/194

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.5.1...v8.6.0

What's Changed

• Add B2B step-up docs by @jennifer-stytch in https://github.com/stytchauth/stytch-python/pull/193

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.5.0...v8.5.1

What's Changed

• Update README.md by @chris-stytch in https://github.com/stytchauth/stytch-python/pull/189
• Update Slack URLs by @clee-stytch in https://github.com/stytchauth/stytch-python/pull/190
• Bump black from 22.12.0 to 24.3.0 by @dependabot in https://github.com/stytchauth/stytch-python/pull/191
• Release B2B step-up, OAuth refresh tokens, and other fixes by @jennifer-stytch in https://github.com/stytchauth/stytch-python/pull/192

New Contributors

• @clee-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/190

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.4.0...v8.5.0

What's Changed

• Add email_address to UpdateMember by @alex-stytch in https://github.com/stytchauth/stytch-python/pull/187

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.3.0...v8.4.0

What's Changed

• chore: [AUTH-2594] Publish Member OAuth methods by @max-stytch in https://github.com/stytchauth/stytch-python/pull/186

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.2.0...v8.3.0

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.1.0...v8.2.0

What's Changed

• Autogen update: totp and recovery codes by @taronish-stytch in https://github.com/stytchauth/stytch-python/pull/185

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.0.4...v8.1.0

What's Changed

• Bump jinja2 from 3.1.2 to 3.1.3 by @dependabot in https://github.com/stytchauth/stytch-python/pull/183
• fix: Add None to Optional Type WebAuthnFactor.user_agent by @ollie-stytch in https://github.com/stytchauth/stytch-python/pull/184

New Contributors

• @dependabot made their first contribution in https://github.com/stytchauth/stytch-python/pull/183

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.0.3...v8.0.4

What's Changed

• Make user_agent WebAuthN Factor Optional by @ollie-stytch in https://github.com/stytchauth/stytch-python/pull/182

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.0.2...v8.0.3

What's Changed

• Add default value for required roles param in local JWT auth by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/181

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.0.1...v8.0.2

What's Changed

• Mark preserve_existing_sessions optional by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/180

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v8.0.0...v8.0.1

RBAC

• The Stytch product will soon support role-based access control (RBAC)! See our RBAC guide at https://stytch.com/docs/b2b/guides/rbac/overview for more detailed explanations of our RBAC product.
• RBAC policies must be set through the dashboard, but you can use various endpoints to assign Roles to Members and add implicit role assignments to Organizations and SSO connections (more details in the guide at https://stytch.com/docs/b2b/guides/rbac/role-assignment).
• You can perform an RBAC authorization check when authenticating a JWT. This will use a locally cached version of the RBAC policy.
• Some endpoints, such as Create Member, offer out-of-the-box handling of RBAC authorization checks if a session token or session JWT is passed in.

Other changes

• Added support to core HTTP clients to send headers. This is used for certain routes that can be used in conjunction with RBAC for authorization, like magic_links.email.invite().
• Some methods will now have a new optional $METHODRequestOptions field – this is used to supply authorization data for RBAC (see previous point).
• authenticate_jwt and authenticate_jwt_local now accept an optional AuthorizationCheck parameter for performing RBAC checks. These will use a cached version of the project's RBAC policy in order to make an authZ verdict.
• Built a LazyCache (which is intended to only be exposed internally that is used for fetching the project's RBAC policy only when needed – by default this expires every 5 minutes, but only refreshes upon receiving a request that will use the value. This means that if your project does not use RBAC, the cache will never fetch the policy.
• Additionally, this update features a large amount of documentation updates which should better reflect what you can find at https://stytch.com/docs.

Autogenerated notes below

What's Changed

• docs: update link to web sdk by @jbolduc-stytch in https://github.com/stytchauth/stytch-python/pull/177
• Release stytch-python v8 with new RBAC features by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/179

New Contributors

• @jbolduc-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/177

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.9.0...v8.0.0

What's Changed

• Bump minimum supported version to 3.8 by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/178

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.8.0...v7.9.0

What's Changed

• Add "dangerously get member" to SDKs and SAML Update by URL and Doc by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/175

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.7.4...v7.8.0

What's Changed

• Add WebAuthnUpdate by @alex-stytch in https://github.com/stytchauth/stytch-python/pull/162

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.7.3...v7.7.4

What's Changed

• Add additional fields to B2B Password Reset by Session by @nikhil-stytch in https://github.com/stytchauth/stytch-python/pull/161

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.7.2...v7.7.3

• 118cff0: Fix B2B local JWT auth logic

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.7.1...v7.7.2

What's Changed

• feat: [AUTH-1645] Add additional params to PasswordsSessionReset by @max-stytch in https://github.com/stytchauth/stytch-python/pull/159

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.7.0...v7.7.1

What's Changed

• Fix bad import path in README by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/157
• [AUTH-1634] Bump SDKs by @ollie-stytch in https://github.com/stytchauth/stytch-python/pull/158

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.6.0...v7.7.0

What's Changed

• ExchangePrimaryFactor by @alex-stytch in https://github.com/stytchauth/stytch-python/pull/155

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.5.0...v7.6.0

What's Changed

• Improve handling of enum values by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/154

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.4.0...v7.5.0

What's Changed

• M2M Manual methods by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/152

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.3.1...v7.4.0

What's Changed

• Fix Consumer JWKS URL by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/153

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.3.0...v7.3.1

What's Changed

• Run auto-gen before committing M2M manual changes by @vincent-stytch in https://github.com/stytchauth/stytch-python/pull/151

New Contributors

• @vincent-stytch made their first contribution in https://github.com/stytchauth/stytch-python/pull/151

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.2.2...v7.3.0

What's Changed

• Correct Usage of Pydantic Validation Error by @max-muoto in https://github.com/stytchauth/stytch-python/pull/149
• Add more details when failing to parse JSON into object type by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/148

New Contributors

• @max-muoto made their first contribution in https://github.com/stytchauth/stytch-python/pull/149

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.2.1...v7.2.2

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.2.0...v7.2.1

What's Changed

• Add workflow to periodically check for broken links by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/146
• Add local JWT auth for B2B and add B2B OAuth/OTP by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/147

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.1.0...v7.2.0

What's Changed

• Add B2B OAuth & OTP by @alex-stytch in https://github.com/stytchauth/stytch-python/pull/145

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.0.2...v7.1.0

What's Changed

• Custom claims is not always present

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.0.1...v7.0.2

What's Changed

• Add missing init.py file by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/144

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v7.0.0...v7.0.1

What's Changed

• Generate stytch-python completely from API definitions + docs by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/138

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v6.11.0...v7.0.0

What's Changed

• Bump pydantic to v2 and pin versions better by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/143

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v6.10.0...v6.11.0

What's Changed

• Use GH CLI tool for releases by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/137
• Update action to use Makefile commands by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/139
• Add attributes support to magic_links.email.login_or_create() by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/141

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v6.9.0...v6.10.0

What's Changed

• [AUTH-732] Add Organizations Member Map by @ollie-stytch in https://github.com/stytchauth/stytch-python/pull/135
• Infer environment from project_id by @logan-stytch in https://github.com/stytchauth/stytch-python/pull/136

Full Changelog: https://github.com/stytchauth/stytch-python/compare/v6.8.0...v6.9.0

New Features

• 6 new endpoints: b2b_client.magic_links.email.discovery.send, b2b_client.magic_links.discovery.authenticate, b2b_client.discovery.organzations.list,b2b_client.discovery.intermediate_sessions.exchange, b2b_client.discovery.organizations.create, and b2b_client.sessions.exchange.

New Features

• CreateMember endpoint
• UpdateMember endpoint
• New locale argument on B2B email magic link methods - emails can be sent in English (en), Spanish (es), or Brazilian Portuguese (pt-br)
• Breakglass attributes for B2B organizations and members - these are set using auth_methods and allowed_auth_methods on organizations, and the is_breakglass attributes for members

Fixes

• Fixed a typo in the invited_by_member_id field for B2B email invites