Supertokens-python

Latest version: v0.29.0

Safety actively analyzes 722460 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 21

0.29.0

Breaking changes
- Makes URL path normalization case sensitive
- Updates `normalise_url_path_or_throw_error` to be case sensitive
- URL paths will not be converted to lower-case, and will be kept as-is.

Changes
- Adds option to disable `tldextract` HTTP calls by setting `SUPERTOKENS_TLDEXTRACT_DISABLE_HTTP=1`

Infrastructure
- Upgrades `pip` and `setuptools` in CI publish job
- Also upgrades `poetry` and it's dependency - `clikit`
- Migrates unit tests to use a containerized core
- Updates `Makefile` to use a Docker `compose` setup step
- Migrates unit tests from CircleCI to Github Actions
- Adds lint/format checks to Github Actions

0.28.1

- Pins `httpx` and `respx` to current major versions (<1.0.0)
- Removes `respx` dependency from `fastapi` install
- Upgrades `pip` and `setuptools` in CI runs

0.28.0

- **[Breaking] Updates pre-commit hooks to use `pre-commit`**
- Migration:
bash
rm ./.git/hooks/pre-commit
make set-up-hooks

- Adds `raw_user_info_from_provider` to `UserInfo` data in LinkedIn and Github third-party recipes.
- **[Breaking] Bitbucket third-party recipe**
- Moves `email` from `from_id_token_payload` to `from_user_info_api` in `raw_user_info_from_provider`.
- Keeps the API consistent with the Node SDK.
- Migration:

- user_info.raw_user_info_from_provider.from_id_token_payload["email"]
+ user_info.raw_user_info_from_provider.from_user_info_api["email"]

- Updates timestamps to use UTC instead of GMT as the timezone

0.27.0

- Added OAuth2Provider recipe
- Added support for FDIs: 4.0. Required by: auth-react >=0.48.0 and web-js>=0.14.0

0.26.1

- Fixes dependency for docs build

0.26.0

- Not supporting Python 3.7
- Updating dependencies for vulnerability fixes

Page 1 of 21

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.