Authlib 1.6.11__tar.gz → 1.7.0__tar.gz

{authlib-1.6.11 → authlib-1.7.0}/Authlib.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Authlib
-Version: 1.6.11
+Version: 1.7.0
 Summary: The ultimate Python library in building OAuth and OpenID Connect servers and clients.
 Author-email: Hsiaoming Yang <me@lepture.com>
 License: BSD-3-Clause
@@ -18,21 +18,22 @@ Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: Implementation :: PyPy
 Classifier: Topic :: Security
 Classifier: Topic :: Security :: Cryptography
 Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
 Classifier: Topic :: Internet :: WWW/HTTP :: WSGI :: Application
-Requires-Python: >=3.9
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: cryptography
+Requires-Dist: joserfc>=1.6.0
 Dynamic: license-file
 
 <div align="center">
@@ -54,7 +55,7 @@ Dynamic: license-file
 The ultimate Python library in building OAuth and OpenID Connect servers.
 JWS, JWK, JWA, JWT are included.
 
-Authlib is compatible with Python3.9+.
+Authlib is compatible with Python3.10+.
 
 ## Migrations
 
@@ -76,70 +77,71 @@ Authlib will deprecate `authlib.jose` module, please read:
 </tr>
 </table>
 
-[**Fund Authlib to access additional features**](https://docs.authlib.org/en/latest/community/funding.html)
+[**Fund Authlib to access additional features**](https://docs.authlib.org/en/stable/community/funding.html)
 
 ## Features
 
 Generic, spec-compliant implementation to build clients and providers:
 
-- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/latest/basic/oauth1.html)
-  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/latest/specs/rfc5849.html)
-- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/latest/basic/oauth2.html)
-  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/latest/specs/rfc6749.html)
-  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/latest/specs/rfc6750.html)
-  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/latest/specs/rfc7009.html)
-  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/latest/specs/rfc7523.html)
-  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/latest/specs/rfc7591.html)
-  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/latest/specs/rfc7592.html)
-  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/latest/specs/rfc7636.html)
-  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/latest/specs/rfc7662.html)
-  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/latest/specs/rfc8414.html)
-  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/latest/specs/rfc8628.html)
-  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/latest/specs/rfc9068.html)
-  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/latest/specs/rfc9101.html)
-  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/latest/specs/rfc9207.html)
-- [Javascript Object Signing and Encryption](https://docs.authlib.org/en/latest/jose/index.html)
-  - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/latest/jose/jws.html)
-  - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/latest/jose/jwe.html)
-  - [RFC7517: JSON Web Key](https://docs.authlib.org/en/latest/jose/jwk.html)
-  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/latest/specs/rfc7518.html)
-  - [RFC7519: JSON Web Token](https://docs.authlib.org/en/latest/jose/jwt.html)
-  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/latest/specs/rfc7638.html)
+- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/basic/oauth1.html)
+  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/specs/rfc5849.html)
+- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/basic/oauth2.html)
+  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/specs/rfc6749.html)
+  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/specs/rfc6750.html)
+  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/specs/rfc7009.html)
+  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/specs/rfc7523.html)
+  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/specs/rfc7591.html)
+  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/specs/rfc7592.html)
+  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/specs/rfc7636.html)
+  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/specs/rfc7662.html)
+  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/specs/rfc8414.html)
+  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/specs/rfc8628.html)
+  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/specs/rfc9068.html)
+  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/specs/rfc9101.html)
+  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/specs/rfc9207.html)
+- [Javascript Object Signing and Encryption](https://docs.authlib.org/en/stable/jose/index.html)
+  - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/stable/jose/jws.html)
+  - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/stable/jose/jwe.html)
+  - [RFC7517: JSON Web Key](https://docs.authlib.org/en/stable/jose/jwk.html)
+  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/specs/rfc7518.html)
+  - [RFC7519: JSON Web Token](https://docs.authlib.org/en/stable/jose/jwt.html)
+  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/specs/rfc7638.html)
   - [ ] RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
-  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/latest/specs/rfc8037.html)
+  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/specs/rfc8037.html)
   - [ ] draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
-- [OpenID Connect 1.0](https://docs.authlib.org/en/latest/specs/oidc.html)
+- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/specs/oidc.html)
   - [x] OpenID Connect Core 1.0
   - [x] OpenID Connect Discovery 1.0
   - [x] OpenID Connect Dynamic Client Registration 1.0
+  - [x] [OpenID Connect RP-Initiated Logout 1.0](https://openid.net/specs/openid-connect-rpinitiated-1_0.html)
 
 Connect third party OAuth providers with Authlib built-in client integrations:
 
 - Requests
-  - [OAuth1Session](https://docs.authlib.org/en/latest/client/requests.html#requests-oauth-1-0)
-  - [OAuth2Session](https://docs.authlib.org/en/latest/client/requests.html#requests-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/latest/client/requests.html#requests-openid-connect)
-  - [AssertionSession](https://docs.authlib.org/en/latest/client/requests.html#requests-service-account)
+  - [OAuth1Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-1-0)
+  - [OAuth2Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/client/requests.html#requests-openid-connect)
+  - [AssertionSession](https://docs.authlib.org/en/stable/client/requests.html#requests-service-account)
 - HTTPX
-  - [AsyncOAuth1Client](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-1-0)
-  - [AsyncOAuth2Client](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-2-0)
-  - [AsyncAssertionClient](https://docs.authlib.org/en/latest/client/httpx.html#async-service-account)
-- [Flask OAuth Client](https://docs.authlib.org/en/latest/client/flask.html)
-- [Django OAuth Client](https://docs.authlib.org/en/latest/client/django.html)
-- [Starlette OAuth Client](https://docs.authlib.org/en/latest/client/starlette.html)
-- [FastAPI OAuth Client](https://docs.authlib.org/en/latest/client/fastapi.html)
+  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-1-0)
+  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
+  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/client/httpx.html#async-service-account)
+- [Flask OAuth Client](https://docs.authlib.org/en/stable/client/flask.html)
+- [Django OAuth Client](https://docs.authlib.org/en/stable/client/django.html)
+- [Starlette OAuth Client](https://docs.authlib.org/en/stable/client/starlette.html)
+- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/client/fastapi.html)
 
 Build your own OAuth 1.0, OAuth 2.0, and OpenID Connect providers:
 
 - Flask
-  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/latest/flask/1/)
-  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/latest/flask/2/)
-  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/latest/flask/2/openid-connect.html)
+  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/flask/1/)
+  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/flask/2/)
+  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/flask/2/openid-connect.html)
 - Django
-  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/latest/django/1/)
-  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/latest/django/2/)
-  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/latest/django/2/openid-connect.html)
+  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/django/1/)
+  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/django/2/)
+  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/django/2/openid-connect.html)
 
 ## Useful Links
 

{authlib-1.6.11 → authlib-1.7.0}/Authlib.egg-info/SOURCES.txt

@@ -9,6 +9,7 @@ Authlib.egg-info/dependency_links.txt
 Authlib.egg-info/requires.txt
 Authlib.egg-info/top_level.txt
 authlib/__init__.py
+authlib/_joserfc_helpers.py
 authlib/consts.py
 authlib/deprecate.py
 authlib/common/__init__.py
@@ -121,10 +122,12 @@ authlib/oauth1/rfc5849/wrapper.py
 authlib/oauth2/__init__.py
 authlib/oauth2/auth.py
 authlib/oauth2/base.py
+authlib/oauth2/claims.py
 authlib/oauth2/client.py
 authlib/oauth2/rfc6749/__init__.py
 authlib/oauth2/rfc6749/authenticate_client.py
 authlib/oauth2/rfc6749/authorization_server.py
+authlib/oauth2/rfc6749/endpoint.py
 authlib/oauth2/rfc6749/errors.py
 authlib/oauth2/rfc6749/hooks.py
 authlib/oauth2/rfc6749/models.py
@@ -191,6 +194,7 @@ authlib/oauth2/rfc9101/discovery.py
 authlib/oauth2/rfc9101/errors.py
 authlib/oauth2/rfc9101/registration.py
 authlib/oauth2/rfc9207/__init__.py
+authlib/oauth2/rfc9207/discovery.py
 authlib/oauth2/rfc9207/parameter.py
 authlib/oidc/__init__.py
 authlib/oidc/core/__init__.py
@@ -200,6 +204,7 @@ authlib/oidc/core/models.py
 authlib/oidc/core/userinfo.py
 authlib/oidc/core/util.py
 authlib/oidc/core/grants/__init__.py
+authlib/oidc/core/grants/_legacy.py
 authlib/oidc/core/grants/code.py
 authlib/oidc/core/grants/hybrid.py
 authlib/oidc/core/grants/implicit.py
@@ -208,4 +213,8 @@ authlib/oidc/discovery/__init__.py
 authlib/oidc/discovery/models.py
 authlib/oidc/discovery/well_known.py
 authlib/oidc/registration/__init__.py
-authlib/oidc/registration/claims.py
+authlib/oidc/registration/claims.py
+authlib/oidc/rpinitiated/__init__.py
+authlib/oidc/rpinitiated/discovery.py
+authlib/oidc/rpinitiated/end_session.py
+authlib/oidc/rpinitiated/registration.py

authlib-1.7.0/Authlib.egg-info/requires.txt

@@ -0,0 +1,2 @@
+cryptography
+joserfc>=1.6.0

{authlib-1.6.11 → authlib-1.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Authlib
-Version: 1.6.11
+Version: 1.7.0
 Summary: The ultimate Python library in building OAuth and OpenID Connect servers and clients.
 Author-email: Hsiaoming Yang <me@lepture.com>
 License: BSD-3-Clause
@@ -18,21 +18,22 @@ Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: Implementation :: PyPy
 Classifier: Topic :: Security
 Classifier: Topic :: Security :: Cryptography
 Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
 Classifier: Topic :: Internet :: WWW/HTTP :: WSGI :: Application
-Requires-Python: >=3.9
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: cryptography
+Requires-Dist: joserfc>=1.6.0
 Dynamic: license-file
 
 <div align="center">
@@ -54,7 +55,7 @@ Dynamic: license-file
 The ultimate Python library in building OAuth and OpenID Connect servers.
 JWS, JWK, JWA, JWT are included.
 
-Authlib is compatible with Python3.9+.
+Authlib is compatible with Python3.10+.
 
 ## Migrations
 
@@ -76,70 +77,71 @@ Authlib will deprecate `authlib.jose` module, please read:
 </tr>
 </table>
 
-[**Fund Authlib to access additional features**](https://docs.authlib.org/en/latest/community/funding.html)
+[**Fund Authlib to access additional features**](https://docs.authlib.org/en/stable/community/funding.html)
 
 ## Features
 
 Generic, spec-compliant implementation to build clients and providers:
 
-- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/latest/basic/oauth1.html)
-  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/latest/specs/rfc5849.html)
-- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/latest/basic/oauth2.html)
-  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/latest/specs/rfc6749.html)
-  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/latest/specs/rfc6750.html)
-  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/latest/specs/rfc7009.html)
-  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/latest/specs/rfc7523.html)
-  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/latest/specs/rfc7591.html)
-  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/latest/specs/rfc7592.html)
-  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/latest/specs/rfc7636.html)
-  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/latest/specs/rfc7662.html)
-  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/latest/specs/rfc8414.html)
-  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/latest/specs/rfc8628.html)
-  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/latest/specs/rfc9068.html)
-  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/latest/specs/rfc9101.html)
-  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/latest/specs/rfc9207.html)
-- [Javascript Object Signing and Encryption](https://docs.authlib.org/en/latest/jose/index.html)
-  - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/latest/jose/jws.html)
-  - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/latest/jose/jwe.html)
-  - [RFC7517: JSON Web Key](https://docs.authlib.org/en/latest/jose/jwk.html)
-  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/latest/specs/rfc7518.html)
-  - [RFC7519: JSON Web Token](https://docs.authlib.org/en/latest/jose/jwt.html)
-  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/latest/specs/rfc7638.html)
+- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/basic/oauth1.html)
+  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/specs/rfc5849.html)
+- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/basic/oauth2.html)
+  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/specs/rfc6749.html)
+  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/specs/rfc6750.html)
+  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/specs/rfc7009.html)
+  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/specs/rfc7523.html)
+  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/specs/rfc7591.html)
+  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/specs/rfc7592.html)
+  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/specs/rfc7636.html)
+  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/specs/rfc7662.html)
+  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/specs/rfc8414.html)
+  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/specs/rfc8628.html)
+  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/specs/rfc9068.html)
+  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/specs/rfc9101.html)
+  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/specs/rfc9207.html)
+- [Javascript Object Signing and Encryption](https://docs.authlib.org/en/stable/jose/index.html)
+  - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/stable/jose/jws.html)
+  - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/stable/jose/jwe.html)
+  - [RFC7517: JSON Web Key](https://docs.authlib.org/en/stable/jose/jwk.html)
+  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/specs/rfc7518.html)
+  - [RFC7519: JSON Web Token](https://docs.authlib.org/en/stable/jose/jwt.html)
+  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/specs/rfc7638.html)
   - [ ] RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
-  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/latest/specs/rfc8037.html)
+  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/specs/rfc8037.html)
   - [ ] draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
-- [OpenID Connect 1.0](https://docs.authlib.org/en/latest/specs/oidc.html)
+- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/specs/oidc.html)
   - [x] OpenID Connect Core 1.0
   - [x] OpenID Connect Discovery 1.0
   - [x] OpenID Connect Dynamic Client Registration 1.0
+  - [x] [OpenID Connect RP-Initiated Logout 1.0](https://openid.net/specs/openid-connect-rpinitiated-1_0.html)
 
 Connect third party OAuth providers with Authlib built-in client integrations:
 
 - Requests
-  - [OAuth1Session](https://docs.authlib.org/en/latest/client/requests.html#requests-oauth-1-0)
-  - [OAuth2Session](https://docs.authlib.org/en/latest/client/requests.html#requests-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/latest/client/requests.html#requests-openid-connect)
-  - [AssertionSession](https://docs.authlib.org/en/latest/client/requests.html#requests-service-account)
+  - [OAuth1Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-1-0)
+  - [OAuth2Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/client/requests.html#requests-openid-connect)
+  - [AssertionSession](https://docs.authlib.org/en/stable/client/requests.html#requests-service-account)
 - HTTPX
-  - [AsyncOAuth1Client](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-1-0)
-  - [AsyncOAuth2Client](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-2-0)
-  - [AsyncAssertionClient](https://docs.authlib.org/en/latest/client/httpx.html#async-service-account)
-- [Flask OAuth Client](https://docs.authlib.org/en/latest/client/flask.html)
-- [Django OAuth Client](https://docs.authlib.org/en/latest/client/django.html)
-- [Starlette OAuth Client](https://docs.authlib.org/en/latest/client/starlette.html)
-- [FastAPI OAuth Client](https://docs.authlib.org/en/latest/client/fastapi.html)
+  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-1-0)
+  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
+  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/client/httpx.html#async-service-account)
+- [Flask OAuth Client](https://docs.authlib.org/en/stable/client/flask.html)
+- [Django OAuth Client](https://docs.authlib.org/en/stable/client/django.html)
+- [Starlette OAuth Client](https://docs.authlib.org/en/stable/client/starlette.html)
+- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/client/fastapi.html)
 
 Build your own OAuth 1.0, OAuth 2.0, and OpenID Connect providers:
 
 - Flask
-  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/latest/flask/1/)
-  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/latest/flask/2/)
-  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/latest/flask/2/openid-connect.html)
+  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/flask/1/)
+  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/flask/2/)
+  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/flask/2/openid-connect.html)
 - Django
-  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/latest/django/1/)
-  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/latest/django/2/)
-  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/latest/django/2/openid-connect.html)
+  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/django/1/)
+  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/django/2/)
+  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/django/2/openid-connect.html)
 
 ## Useful Links
 

{authlib-1.6.11 → authlib-1.7.0}/README.md

@@ -17,7 +17,7 @@
 The ultimate Python library in building OAuth and OpenID Connect servers.
 JWS, JWK, JWA, JWT are included.
 
-Authlib is compatible with Python3.9+.
+Authlib is compatible with Python3.10+.
 
 ## Migrations
 
@@ -39,70 +39,71 @@ Authlib will deprecate `authlib.jose` module, please read:
 </tr>
 </table>
 
-[**Fund Authlib to access additional features**](https://docs.authlib.org/en/latest/community/funding.html)
+[**Fund Authlib to access additional features**](https://docs.authlib.org/en/stable/community/funding.html)
 
 ## Features
 
 Generic, spec-compliant implementation to build clients and providers:
 
-- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/latest/basic/oauth1.html)
-  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/latest/specs/rfc5849.html)
-- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/latest/basic/oauth2.html)
-  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/latest/specs/rfc6749.html)
-  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/latest/specs/rfc6750.html)
-  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/latest/specs/rfc7009.html)
-  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/latest/specs/rfc7523.html)
-  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/latest/specs/rfc7591.html)
-  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/latest/specs/rfc7592.html)
-  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/latest/specs/rfc7636.html)
-  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/latest/specs/rfc7662.html)
-  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/latest/specs/rfc8414.html)
-  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/latest/specs/rfc8628.html)
-  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/latest/specs/rfc9068.html)
-  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/latest/specs/rfc9101.html)
-  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/latest/specs/rfc9207.html)
-- [Javascript Object Signing and Encryption](https://docs.authlib.org/en/latest/jose/index.html)
-  - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/latest/jose/jws.html)
-  - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/latest/jose/jwe.html)
-  - [RFC7517: JSON Web Key](https://docs.authlib.org/en/latest/jose/jwk.html)
-  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/latest/specs/rfc7518.html)
-  - [RFC7519: JSON Web Token](https://docs.authlib.org/en/latest/jose/jwt.html)
-  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/latest/specs/rfc7638.html)
+- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/basic/oauth1.html)
+  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/specs/rfc5849.html)
+- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/basic/oauth2.html)
+  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/specs/rfc6749.html)
+  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/specs/rfc6750.html)
+  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/specs/rfc7009.html)
+  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/specs/rfc7523.html)
+  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/specs/rfc7591.html)
+  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/specs/rfc7592.html)
+  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/specs/rfc7636.html)
+  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/specs/rfc7662.html)
+  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/specs/rfc8414.html)
+  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/specs/rfc8628.html)
+  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/specs/rfc9068.html)
+  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/specs/rfc9101.html)
+  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/specs/rfc9207.html)
+- [Javascript Object Signing and Encryption](https://docs.authlib.org/en/stable/jose/index.html)
+  - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/stable/jose/jws.html)
+  - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/stable/jose/jwe.html)
+  - [RFC7517: JSON Web Key](https://docs.authlib.org/en/stable/jose/jwk.html)
+  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/specs/rfc7518.html)
+  - [RFC7519: JSON Web Token](https://docs.authlib.org/en/stable/jose/jwt.html)
+  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/specs/rfc7638.html)
   - [ ] RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
-  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/latest/specs/rfc8037.html)
+  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/specs/rfc8037.html)
   - [ ] draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
-- [OpenID Connect 1.0](https://docs.authlib.org/en/latest/specs/oidc.html)
+- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/specs/oidc.html)
   - [x] OpenID Connect Core 1.0
   - [x] OpenID Connect Discovery 1.0
   - [x] OpenID Connect Dynamic Client Registration 1.0
+  - [x] [OpenID Connect RP-Initiated Logout 1.0](https://openid.net/specs/openid-connect-rpinitiated-1_0.html)
 
 Connect third party OAuth providers with Authlib built-in client integrations:
 
 - Requests
-  - [OAuth1Session](https://docs.authlib.org/en/latest/client/requests.html#requests-oauth-1-0)
-  - [OAuth2Session](https://docs.authlib.org/en/latest/client/requests.html#requests-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/latest/client/requests.html#requests-openid-connect)
-  - [AssertionSession](https://docs.authlib.org/en/latest/client/requests.html#requests-service-account)
+  - [OAuth1Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-1-0)
+  - [OAuth2Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/client/requests.html#requests-openid-connect)
+  - [AssertionSession](https://docs.authlib.org/en/stable/client/requests.html#requests-service-account)
 - HTTPX
-  - [AsyncOAuth1Client](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-1-0)
-  - [AsyncOAuth2Client](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/latest/client/httpx.html#httpx-oauth-2-0)
-  - [AsyncAssertionClient](https://docs.authlib.org/en/latest/client/httpx.html#async-service-account)
-- [Flask OAuth Client](https://docs.authlib.org/en/latest/client/flask.html)
-- [Django OAuth Client](https://docs.authlib.org/en/latest/client/django.html)
-- [Starlette OAuth Client](https://docs.authlib.org/en/latest/client/starlette.html)
-- [FastAPI OAuth Client](https://docs.authlib.org/en/latest/client/fastapi.html)
+  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-1-0)
+  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
+  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/client/httpx.html#async-service-account)
+- [Flask OAuth Client](https://docs.authlib.org/en/stable/client/flask.html)
+- [Django OAuth Client](https://docs.authlib.org/en/stable/client/django.html)
+- [Starlette OAuth Client](https://docs.authlib.org/en/stable/client/starlette.html)
+- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/client/fastapi.html)
 
 Build your own OAuth 1.0, OAuth 2.0, and OpenID Connect providers:
 
 - Flask
-  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/latest/flask/1/)
-  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/latest/flask/2/)
-  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/latest/flask/2/openid-connect.html)
+  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/flask/1/)
+  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/flask/2/)
+  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/flask/2/openid-connect.html)
 - Django
-  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/latest/django/1/)
-  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/latest/django/2/)
-  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/latest/django/2/openid-connect.html)
+  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/django/1/)
+  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/django/2/)
+  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/django/2/openid-connect.html)
 
 ## Useful Links
 

authlib-1.7.0/authlib/_joserfc_helpers.py

@@ -0,0 +1,45 @@
+from typing import Any
+
+from joserfc.jwk import KeySet
+from joserfc.jwk import import_key
+
+from authlib.common.encoding import json_loads
+from authlib.deprecate import deprecate
+from authlib.jose import ECKey
+from authlib.jose import OctKey
+from authlib.jose import OKPKey
+from authlib.jose import RSAKey
+
+
+def import_any_key(data: Any):
+    if isinstance(data, (OctKey, RSAKey, ECKey, OKPKey)):
+        deprecate("Please use joserfc to import keys.", version="2.0.0")
+        return import_key(data.as_dict(is_private=not data.public_only))
+
+    if (
+        isinstance(data, str)
+        and data.strip().startswith("{")
+        and data.strip().endswith("}")
+    ):
+        deprecate(
+            "Please use OctKey, RSAKey, ECKey, OKPKey, and KeySet directly.",
+            version="2.0.0",
+        )
+        data = json_loads(data)
+
+    if isinstance(data, (str, bytes)):
+        deprecate(
+            "Please use OctKey, RSAKey, ECKey, OKPKey, and KeySet directly.",
+            version="2.0.0",
+        )
+        return import_key(data)
+
+    elif isinstance(data, dict):
+        if "keys" in data:
+            deprecate(
+                "Please `KeySet.import_key_set` from `joserfc.jwk` to import jwks.",
+                version="2.0.0",
+            )
+            return KeySet.import_key_set(data)
+        return import_key(data)
+    return data

{authlib-1.6.11 → authlib-1.7.0}/authlib/common/security.py

@@ -16,4 +16,6 @@ def is_secure_transport(uri):
         return True
 
     uri = uri.lower()
-    return uri.startswith(("https://", "http://localhost:", "http://127.0.0.1:"))
+    return uri.startswith(
+        ("https://", "http://localhost:", "http://127.0.0.1:", "http://[::1]:")
+    )

{authlib-1.6.11 → authlib-1.7.0}/authlib/consts.py

@@ -1,5 +1,5 @@
 name = "Authlib"
-version = "1.6.11"
+version = "1.7.0"
 author = "Hsiaoming Yang <me@lepture.com>"
 homepage = "https://authlib.org"
 default_user_agent = f"{name}/{version} (+{homepage})"

{authlib-1.6.11 → authlib-1.7.0}/authlib/deprecate.py

@@ -8,11 +8,8 @@ class AuthlibDeprecationWarning(DeprecationWarning):
 warnings.simplefilter("always", AuthlibDeprecationWarning)
 
 
-def deprecate(message, version=None, link_uid=None, link_file=None, stacklevel=3):
+def deprecate(message, version=None, stacklevel=3):
     if version:
         message += f"\nIt will be compatible before version {version}."
 
-    if link_uid and link_file:
-        message += f"\nRead more <https://git.io/{link_uid}#file-{link_file}-md>"
-
     warnings.warn(AuthlibDeprecationWarning(message), stacklevel=stacklevel)

{authlib-1.6.11 → authlib-1.7.0}/authlib/integrations/base_client/async_app.py

@@ -75,7 +75,7 @@ class AsyncOAuth2Mixin(OAuth2Base):
 
     async def load_server_metadata(self):
         if self._server_metadata_url and "_loaded_at" not in self.server_metadata:
-            async with self.client_cls(**self.client_kwargs) as client:
+            async with self._get_session() as client:
                 resp = await client.request(
                     "GET", self._server_metadata_url, withhold_token=True
                 )