* Account e-mail association when authenticating with OAuth is now disabled by default for security reasons. It can be re-enabled on the router using the `associate_by_email` flag. [[Documentation](https://fastapi-users.github.io/fastapi-users/10.1/configuration/oauth/#existing-account-association)] * New router to associate an OAuth account with an authenticated user account. [[Documentation](https://fastapi-users.github.io/fastapi-users/10.1/configuration/oauth/#existing-account-association)] * New hooks `on_before_delete` and `on_after_delete`. [[Documentation](https://fastapi-users.github.io/fastapi-users/10.1/configuration/user-manager/#on_before_delete)] Thanks schwannden 🎉 * Bump dependencies: * `httpx-oauth >=0.4,<=0.7` Thanks carloe 🎉
10.0.7
Not secure
Improvements
* FastAPI dependency is now unconstrained, meaning FastAPI Users will always be installable with the latest version of FastAPI. Thanks austinorr 🎉 * Optional Redis dependency now uses the main `redis` package, as async support has been merged into it. Thanks applied-mathematician 🎉
10.0.6
Not secure
Security fix
* Upgrade `pyjwt[crypto] ==2.4.0` to fix [CVE-2022-29217](https://github.com/advisories/GHSA-ffqj-6fqr-9h24). Thanks JimScope 🎉
10.0.5
Not secure
Bug fixes
* Fix 1000: using Beanie, `id` was `null` in API responses. Thanks JimScope 🎉