Djoser

---------------------

* Drop support for Python<3.5
* Drop support for djangorestframework<3.10
* Drop legacy routes
* Reworked permissions logic and default classes (see :ref:`View Permission Settings<view-permission-settings>`)
* Add ``CONSTANTS`` option to settings (mrouhi13)
* Remove deprecated ``CurrentUserSerializer``
* Remove deprecated ``settings.get()`` method

---------------------

---------------------

* Add LOGIN_FIELD setting
* Add CONSTANTS option to settings (mrouhi13)
* Add USER_CREATE_PASSWORD_RETYPE option (Chadys)
* Allow using custom email field (Chadys)
* Remove non_field_error from base endpoints (Chadys)
* Other small fixes

---------------------

---------------------

* Added Russian translation (ozeranskiy)
* Added French translation (Chadys)
* Fix superfluous translation string (Chadys)
* Prevent non-staff users from getting other users' data (hawi74)
* Fix tests for Python 2.7
* Fix some problems in documentation

---------------------

---------------------

* Fixed a vulnerability of UserViewSet that allowed to create new accounts on wrong endpoint. (Thanks to karazuba for reporting)
* Past minor version since 1.2 will get a bugfix update and affected versions will be removed from PyPI to prevent affected versions from being installed.

---------------------

---------------------

* Added endpoint to resend activation email.
* Added Polish and Georgian translations.
* Fix missing **kwargs in ActionViewmixin.post() handler.
* Fixed documentation.
* Other small fixes.

---------------------

---------------------

* Introduced new framework for setting default permissions for certain views.
See :ref:`documentation<view-permission-settings>`.
* Fix permissions regression introduced in 1.3.2.
Default permission for user-list view set to read-only, like in 1.3.2
(defaults to read-only like in 1.3.2).

---------------------