Z3c.authenticator

Latest version: v2.0

Safety actively analyzes 682361 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 4

0.7.1

Not secure
------------------

- Bugfix: the method specialGroups applied groups everytime the method get
called even if the group was already applied. This is a problem if the
global shared unauthenticated principal instance is used because it will
apply similar groups till the server get restarted and a new principal
instance is used.

- Feature: added getUserByLogin to IUserContainer

- Added a test for user migration (that they will keep their ID)

0.7.0

Not secure
------------------

- Update dependencies:

* Use ``zope.container`` instead of ``zope.app.container``.
* Use ``zope.site`` instead of ``zope.app.component``.
* Use ``zope.authentication`` and ``zope.principalregistry`` instead
of ``zope.app.security``.
* Use ``zope.password`` instead of maintaining a copy of password
managers.

- Drop dependency on z3c.i18n and recreate a message factory instead.

0.6.2

Not secure
------------------

- Bugfix: Failed miserably on challenge on pages having non-ASCII names.
(Backport from 0.7.2)

0.6.1

Not secure
------------------

- Backport bugfix 0.7.1 to 0.6.1. See branches/roger-0.6.0

the method specialGroups applied groups everytime the method get
called even if the group was already applied. This is a problem if the
global shared unauthenticated principal instance is used because it will
apply similar groups till the server get restarted and a new principal
instance is used.

0.6.0

Not secure
------------------

- Feature: added support for local IUnauthenticatedPrincipal. This is usefull
if you need to apply local roles to IUnauthenticatedPrincipal. This was not
possible before and is not possible in zope.app.authentication

- Feature: implemented initial grant view based on ISource widget. Note, this
source widget terms implementation which is very complex to understand will
get moved to z3c.from if we fixed the ITerm dependency. Which means ITerm
needs to get moved out of zope.app.form first.

- Feature: added support for next utility lookup in authenticate call. By
default the principals from the global principalregistry get involved now.
You can disable this feature by setting includeNextUtilityForAuthenticate to
False.

- Feature: added PrincipalRegistryAuthenticatorPlugin which allows to
authenticate principals defined in global principal registry.

- Feature: implemented z3c.form prefix support in SessionCredentialsPlugin. Now
there is an option called prefixes which can be used for define a list of
used z3c.form prefixes. This makes it simpler for supporting different forms
and adjust the credential extraction.

- Renamed IGroupPrincipal to IFoundGroup which makes it more understandable
why this adapter implementation is needed. The IFoundGroup adapter is now
also used for zope.security.interfaces.IGroup principals. This makes it
possible to use them in the new principalregistry credential. Provide
deprecation message for the old IGroupPrincipal implementation.

- Removed dependency for zapi. But it's not really gone since other packages
use zapi too.

- Removed unused InvalidPrincipalIds and InvalidGroupId exceptions

- Removed unused IMemberAwareGroup support. This interface is not used in zope
at all.

- Added documentation for Pypi home page.

0.5.1

Not secure
------------------

- Cleanup imports and adjust dependencies

Page 3 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.