v13.0.0

Bump version 12.1.3 → 13.0.0

Breaking change

The underlying password hashing library has been changed from passlib to pwdlib. This change is breaking only if you were using a custom CryptContext. Otherwise, you can upgrade without any changes.

Improvements

• Python 3.12 support
• Password are now hashed using the Argon2 algorithm by default. Passwords created with the previous default algorithm (bcrypt) will still be verified correctly and upgraded to Argon2 when the user logs in.
• Bump dependencies
  • python-multipart ==0.0.9

v12.1.3

Bump version 12.1.2 → 12.1.3

Improvements

• Bump dependenciess
  • python-multipart ==0.0.7

v12.1.2

Bump version 12.1.1 → 12.1.2

Bug fixes

• Fix a bug when trying to update user with a None password. Thanks @fotinakis 🎉
• Fix static type checking error with AccessTokenProtocol. Thanks @Nerixjk 🎉

Improvements

• Bump dependencies
  • redis >=4.3.3,<6.0.0

v12.1.1

Bump version 12.1.0 → 12.1.1

Bug fixes and improvements

• Add missing request parameter to UserManager.delete. Thanks @hgalytoby 🎉
• Remove dummy __init__ method from models protocols to fix Pylance typing error. Thanks @Nerixjk 🎉
• Bump dependencies:
  • pyjwt[crypto] ==2.8.0

v12.1.0

Bump version 12.0.0 → 12.1.0

Pydantic V2 support

This version brings Pydantic V2 support. Like FastAPI, it keeps backward-compatibility with Pydantic V1, so you can upgrade safely and at your own pace.

Apart your own Pydantic schemas, no changes are needed to your FastAPI Users setup.

Thanks @AdamIsrael for the initial work and research 🎉

v12.0.0

Bump version 11.0.0 → 12.0.0

Breaking changes

• Drop Python 3.7 support

v11.0.0

Bump version 10.4.2 → 11.0.0

Breaking changes

• Transport classes now always build full response objects instead of using the implicit FastAPI Response object.
  • If you were not implementing your own custom transport classes, you will have nothing to do.
  • If you implemented custom classes, you should adapt them so they return a Response object. [Example]
• Cookie transport now returns a proper 204 No Content response on logout, which should please OpenAPI Generators. Thanks @caniko 🎉

New features

• on_after_login method now accepts response in argument, which is the Response object built by the transport. [Documentation] Thanks @sorasful 🎉

Bug fixes

• Fix #1166: add type hint to /users/{id} routes. Thanks @gegnew 🎉
• Fix /verify route returning null user ID with Beanie. Thanks @jankadel 🎉

v10.4.2

Bump version 10.4.1 → 10.4.2

Documentation

• Update documentation for Beanie.

v10.4.1

Bump version 10.4.0 → 10.4.1

Bug fixes & improvements

• Fix #1172: missing is_verified_by_default argument on get_oauth_router method
• Bump dependencies:
  • python-multipart ==0.0.6

v10.4.0

Bump version 10.3.0 → 10.4.0

New features

• SQLAlchemy 2.0 support [Documentation]
  • If you need to stay on SQLAlchemy 1.4, you can pin this dependency: fastapi-users-db-sqlalchemy<5.0.0
• Allow to set is_verified flag to True by default after OAuth registration [Documentation]

Improvements

• Bump dependencies
  • httpx-oauth >=0.4,<0.12