Flask-Security Changelog

Here you can see the full list of changes between each Flask-Security release.

Version 1.6.3

Released May 8th 2013

• Fixed bug in regards to imports with latest version of MongoEngine

Version 1.6.2

Released April 4th 2013

• Fixed bug with http basic auth

Version 1.6.1

Released April 3rd 2013

• Fixed bug with signals

Version 1.6.0

Released March 13th 2013

• Added Flask-Pewee support
• Password hashing is now more flexible and can be changed to a different type at will
• Flask-Login messages are configurable
• AJAX requests must now send a CSRF token for security reasons
• Form messages are now configurable
• Forms can now be extended with more fields
• Added change password endpoint
• Added the user to the request context when successfully authenticated via http basic and token auth
• The Flask-Security blueprint subdomain is now configurable
• Redirects to other domains are now not allowed during requests that may redirect
• Template paths can be configured
• The welcome/register email can now optionally be sent to the user
• Passwords can now contain non-latin characters
• Fixed a bug when confirming an account but the account has been deleted

Version 1.5.4

Released January 6th 2013

• Fix bug in forms with csrf_enabled parameter not accounting attempts to login using JSON data

Version 1.5.3

Released December 23rd 2012

• Change dependency requirement

Version 1.5.2

Released December 11th 2012

• Fix a small bug in flask_security.utils.login_user method

Version 1.5.1

Released November 26th 2012

• Fixed bug with next form variable
• Added better documentation regarding Flask-Mail configuration
• Added ability to configure email subjects

Version 1.5.0

Released October 11th 2012

• Major release. Upgrading from previous versions will require a bit of work to accomodate API changes. See documentation for a list of new features and for help on how to upgrade.

Version 1.2.3

Released June 12th 2012

• Fixed a bug in the RoleMixin eq/ne functions

Version 1.2.2

Released April 27th 2012

• Fixed bug where roles_required and roles_accepted did not pass the next argument to the login view

Version 1.2.1

Released March 28th 2012

• Added optional user model mixin parameter for datastores
• Added CreateRoleCommand to available Flask-Script commands

Version 1.2.0

Released March 12th 2012

• Added configuration option SECURITY_FLASH_MESSAGES which can be set to a boolean value to specify if Flask-Security should flash messages or not.

Version 1.1.0

Initial release