v1.3.0

Added

• auth:
  • Introduce AnonymousUser class as a child of AuthenticatedUser with is_anonynous() on AuthenticatedUser class to tell if user is anonymous.
  • Add posibility to lookup user DN in the scope of user base subtree before trying authentication instead of expecting the DN is the basic concatenation of the user name attribute, the login and the user base (#30→#36).
• perms: Add RBACPolicyManager.disable_anonymous() as a mean to disable anonymous role even if defined in loaded authorization policy (#35→#39)

Changed

• web: Change error description and log message when unauthorized to access endpoint with @rbac_action decorator with anonymous token in order to match access without token.

Fixed

• perms: Fix retrieval of anonymous user permissions as defined in authorization policy (#29→#31).
• web:
  • Deny access without bearer token in @check_jwt and @rbac_action decorators (#33,#37→#34,#38).
  • Add missing dependency on Flask package.

v1.2.0

Added

• settings: print list parameters as comma-separated list of values for more readability (#27).

Changed

• permissions: Do not attribute anonymous role by default anymore to authenticated users.

Fixed

• core: AttributeError with asyncio.tasks._gather on Python 3.6 (#23).
• settings:
  • Print URL as readable string in dumps (#25).
  • Print IP/network addresses as readable strings in dumps (#26).

v1.1.1

Added

• web: Add warning log entry in case of JWT decode error (#21).

Fixed

• settings: Valid ip and network default values were wrongly reported having the wrong type (#18).

v1.1.0

Added

• core: Introduce asyncio module with asyncio_run() wrapper with a backported version of asyncio.run() compatible with Python 3.6 (#11).
• settings:
  • Add dump() method on RuntimeSettings class to print all settings with their value and origin on standard output.
  • Add name attribute on SettingsDefinitionLoaderYaml and RuntimeSettingsSiteLoaderIni classes.
  • Add _origin dict attribute on RuntimeSettingsSection to keep tracks of origin of parameters values.
  • Support new password type of parameters, similar to strings but it is not printed as clear text when dumped (#7).
  • Support new ip and network types of parameters which return Python ipaddress.IPv{4,6}Address and ipaddress.IPv{4,6}Network objects respectively (#8).

Fixed

• auth: When retrieving users with users() method, raise LDAPAuthenticationError only when user name attribute is missing in all retrieved user entries, instead of raising as soon as it is missing in any user entry. Warning log message is emitted for all user entries that miss the attribute (#12).

v1.0.3

Added

• core: Introduce utils module with shlex_join function to backport shlex.join() from Python >= 3.8.
• auth:
  • Add user_primary_group_attribute argument to LDAPAuthentifier class initializer with default value gidNumber to define an alternative
    user primary group ID attribute (#4).
  • Add group_object_classes argument to LDAPAuthentifier class initializer with default values posixGroup and groupOfNames to define alternative LDAP group object classes (#6).

Changed

• auth: Support absence of primary group attribute optional in LDAP user entries (#5).

Fixed

• auth: Handle UnicodeDecodeError when loading JWT private key (#3).

v1.0.2

Added

• auth: Add user_name_attribute argumetn with default value uid to LDAPAuthentifier class initializer to specify an alternative user name attribute (#2).
• build: Support explicit packages list without find, lack of dependencies, lack of urls, lack and file license in PEP 518 → setup.py script generator.

Changed

• auth: Add default values for cacert, user_class, user_fullname_attribute and group_name_attribute arguments of LDAPAuthentifier class initializer.

v1.0.1

Changed

• pkgs: add project and build-system sections in main pyproject.toml to satisfy requirements of packaging build systems.

v1.0.0

First stable release of RFL.