Fastapi-users

Latest version: v14.0.1

Safety actively analyzes 723166 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 17

8.1.0

Not secure
New features

* Dynamic selection of authentication backends when using the `current_user` dependency. [[Documentation](https://fastapi-users.github.io/fastapi-users/usage/current-user/#dynamically-enable-authentication-backends)]
* `get_login_response` and `get_logout_response` methods of authentication backends are called with a `UserManager` instance in argument.
* If you use the standard backend, nothing changes for you.
* If you implemented custom backends, you should make sure to accept this new argument in your implementation. [[Source](https://github.com/fastapi-users/fastapi-users/blob/0826ec529915e80c217f1ddc52f76d1c1c71d223/fastapi_users/authentication/base.py#L37-L51)]

8.0.0

Not secure
**Version 8 includes the biggest code changes since version 1. We reorganized lot of parts of the code to make it even more modular and integrate more into the dependency injection system of FastAPI.**

Breaking changes

**Please read the [migration page](https://fastapi-users.github.io/fastapi-users/migration/7x_to_8x/) to update your configuration.**

* Event handlers should live in the `UserManager`. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/user-manager/)]
* Password validation should live in the `UserManager`. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/user-manager/)]
* Verify token secret and lifetime parameters are attributes of `UserManager`. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/user-manager/)]
* Reset password token secret and lifetime parameters are attributes of `UserManager`. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/user-manager/)]
* Database adapter should be provided in a dependency. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/databases/sqlalchemy/)]
* FastAPIUsers now expect a `get_user_manager` dependency. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/routers/)]

Improvements

* More modular design using the new `UserManager` class.
* More integrated into the dependency injection system by using dependencies for database adapters and user manager.
* When updating a user e-mail with the same address as the current one, `UPDATE_USER_EMAIL_ALREADY_EXISTS` is not raised anymore. Thanks ScrimForever 🎉

Documentation

* Full working examples now available as Repl.it. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/full-example/)]

7.0.0

Not secure
Breaking changes

* The deprecated dependencies to retrieve current user have been removed. Use the `current_user` factory instead. [[Documentation](https://fastapi-users.github.io/fastapi-users/usage/current-user/)]
* When trying to authenticate a not verified user, a **status code 403** is raised instead of status code 401. Thanks daanbeverdam 🎉 [[Documentation](https://fastapi-users.github.io/fastapi-users/usage/current-user/#current_user)]
* Your `UserUpdate` model shouldn't inherit from the base `User` class anymore. If you have custom fields, you should repeat them in this model. [[Documentation](https://fastapi-users.github.io/fastapi-users/configuration/model/#define-your-models)]

Improvements

* Database adapters now live in their [own repositories and packages](https://github.com/fastapi-users).
* When upgrading to v7.0.0, the dependency for your database adapter should automatically be installed.
* The `import` statements remain unchanged.
* [SQLAlchemy + encode/databases adapter](https://github.com/fastapi-users/fastapi-users-db-sqlalchemy) have been updated and now support SQLAlchemy 1.4.
* Secret parameters now support Pydantic's [`SecretStr` class](https://pydantic-docs.helpmanual.io/usage/types/#secret-types). Thanks pocin 🎉

What's coming next?

* [SQLModel](https://sqlmodel.tiangolo.com/) support through a new database adapter
* Better examples running on Repl.it
* Tackle 633, 687 and 688

6.1.3

Not secure
Miscellaneous

* Update URL:
* Repository is now at: https://github.com/fastapi-users/fastapi-users/
* Documentation is now at: https://fastapi-users.github.io/fastapi-users/

6.1.2

Not secure
Improvements

* Bump dependencies:
* `fastapi >=0.65.2,<0.69.0`

6.1.1

Not secure
Fixes

* Fix 646: add a `python_type` to the GUID column type for SQLAlchemy database backend. Thanks mark-todd 🎉
* Fix users delete route returning `null` in content with a 204 status code (see 650). Thanks jnu 🎉

Improvements

* Bump dependencies:
* `fastapi >=0.65.2,<0.67.0`

Page 9 of 17

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.