HISTORY.rst

History

0.13.0: 2021-11-03

• Change Kerberos dependencies to pyspnego to modernise the underlying Kerberos library that is used.
• Removed the wrap_winrm and unwrap_winrm functions
• Dropped support for Python 2 and raised minimum Python version to 3.6.
• Renamed the context attribute to _context to indicate it's meant for internal use only.
• Fix Negotiate header regex pattern to avoid DoS affected patterns

0.12.0: 2017-12-20

• Add support for channel binding tokens (assumes pykerberos support >= 1.2.1)
• Add support for kerberos message encryption (assumes pykerberos support >= 1.2.1)
• Misc CI/test fixes

0.11.0: 2016-11-02

• Switch dependency on Windows from kerberos-sspi/pywin32 to WinKerberos. This brings Custom Principal support to Windows users.

0.10.0: 2016-05-18

• Make it possible to receive errors without having their contents and headers stripped.
• Resolve a bug caused by passing the principal keyword argument to kerberos-sspi on Windows.

0.9.0: 2016-05-06

• Support for principal, hostname, and realm override.
• Added support for mutual auth.

0.8.0: 2016-01-07

• Support for Kerberos delegation.
• Fixed problems declaring kerberos-sspi on Windows installs.

0.7.0: 2015-05-04

• Added Windows native authentication support by adding kerberos-sspi as an alternative backend.
• Prevent infinite recursion when a server returns 401 to an authorization attempt.
• Reduce the logging during successful responses.

0.6.1: 2014-11-14

• Fix HTTPKerberosAuth not to treat non-file as a file
• Prevent infinite recursion when GSSErrors occurs

0.6: 2014-11-04

• Handle mutual authentication (see pull request 36)

  All users should upgrade immediately. This has been reported to oss-security and we are awaiting a proper CVE identifier.

  Update: We were issued CVE-2014-8650

• Distribute as a wheel.

0.5: 2014-05-14

• Allow non-HTTP service principals with HTTPKerberosAuth using a new optional argument service.
• Fix bug in setup.py on distributions where the compiler module is not available.
• Add test dependencies to setup.py so python setup.py test will work.

0.4: 2013-10-26

• Minor updates in the README
• Change requirements to depend on requests above 1.1.0

0.3: 2013-06-02

• Work with servers operating on non-standard ports

0.2: 2013-03-26

• Not documented

0.1: Never released

• Initial Release