- Add the option to skip some given endpoints (middleware + injectable). - Allow authentication through bearer token - Fix a bug with graphql injectable - Update versions and fix python version range
1.3.1
Not secure
- Allow updating fastapi >= 0.66 and force updating because of CVE in versions < 0.65.2. - Stop protecting the openapi endpoints by this middleware. - Skip CORS "OPTIONS" requests. - Change redirect to OIDC identity provider from 307 to 303.
1.3.0
Not secure
- Add session middleware and single log out for auth_saml - Remove fixed versions of dependencies.
1.2.1
Not secure
- Add readme flow diagram with absolute link to be displayed on pypi.
1.2.0
Not secure
- Add saml authentication as an authentication method. - Adapt authentication interface (backwards compatible) to allow async and request usage within the authentication method.
1.1.0
Not secure
- Allow custom injectables to enrich the payload sent to OPA. - Add GraphQLAnalysis to parse raw GraphQL payloads and add an injectable to send additional data to OPA allowing fine-grained authorization policies.