PyPI - Authlib - Versions diffs - 1.7.1__tar.gz → 1.7.2__tar.gz - Mend

Authlib 1.7.1tar.gz → 1.7.2tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (223) hide show

{authlib-1.7.1 → authlib-1.7.2}/Authlib.egg-info/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Authlib
-Version: 1.7.1
+Version: 1.7.2
 Summary: The ultimate Python library in building OAuth and OpenID Connect servers and clients.
 Author-email: Hsiaoming Yang <me@lepture.com>
 License: BSD-3-Clause
@@ -83,33 +83,33 @@ Authlib will deprecate `authlib.jose` module, please read:
 Generic, spec-compliant implementation to build clients and providers:
-- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/basic/oauth1.html)
-  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/specs/rfc5849.html)
-- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/basic/oauth2.html)
-  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/specs/rfc6749.html)
-  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/specs/rfc6750.html)
-  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/specs/rfc7009.html)
-  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/specs/rfc7523.html)
-  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/specs/rfc7591.html)
-  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/specs/rfc7592.html)
-  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/specs/rfc7636.html)
-  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/specs/rfc7662.html)
-  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/specs/rfc8414.html)
-  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/specs/rfc8628.html)
-  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/specs/rfc9068.html)
-  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/specs/rfc9101.html)
-  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/specs/rfc9207.html)
+- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/oauth1/index.html)
+  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/oauth1/specs/rfc5849.html)
+- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/oauth2/index.html)
+  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/oauth2/specs/rfc6749.html)
+  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/oauth2/specs/rfc6750.html)
+  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/oauth2/specs/rfc7009.html)
+  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/oauth2/specs/rfc7523.html)
+  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/oauth2/specs/rfc7591.html)
+  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/oauth2/specs/rfc7592.html)
+  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/oauth2/specs/rfc7636.html)
+  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/oauth2/specs/rfc7662.html)
+  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/oauth2/specs/rfc8414.html)
+  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/oauth2/specs/rfc8628.html)
+  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/oauth2/specs/rfc9068.html)
+  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/oauth2/specs/rfc9101.html)
+  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/oauth2/specs/rfc9207.html)
 - [Javascript Object Signing and Encryption](https://docs.authlib.org/en/stable/jose/index.html)
   - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/stable/jose/jws.html)
   - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/stable/jose/jwe.html)
   - [RFC7517: JSON Web Key](https://docs.authlib.org/en/stable/jose/jwk.html)
-  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/specs/rfc7518.html)
+  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/jose/specs/rfc7518.html)
   - [RFC7519: JSON Web Token](https://docs.authlib.org/en/stable/jose/jwt.html)
-  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/specs/rfc7638.html)
+  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/jose/specs/rfc7638.html)
   - [ ] RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
-  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/specs/rfc8037.html)
+  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/jose/specs/rfc8037.html)
   - [ ] draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
-- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/specs/oidc.html)
+- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/oauth2/specs/oidc.html)
   - [x] OpenID Connect Core 1.0
   - [x] OpenID Connect Discovery 1.0
   - [x] OpenID Connect Dynamic Client Registration 1.0
@@ -118,30 +118,30 @@ Generic, spec-compliant implementation to build clients and providers:
 Connect third party OAuth providers with Authlib built-in client integrations:
 - Requests
-  - [OAuth1Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-1-0)
-  - [OAuth2Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/stable/client/requests.html#requests-openid-connect)
-  - [AssertionSession](https://docs.authlib.org/en/stable/client/requests.html#requests-service-account)
+  - [OAuth1Session](https://docs.authlib.org/en/stable/oauth1/client/http/requests.html)
+  - [OAuth2Session](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-openid-connect)
+  - [AssertionSession](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-service-account)
 - HTTPX
-  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-1-0)
-  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
-  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/client/httpx.html#async-service-account)
-- [Flask OAuth Client](https://docs.authlib.org/en/stable/client/flask.html)
-- [Django OAuth Client](https://docs.authlib.org/en/stable/client/django.html)
-- [Starlette OAuth Client](https://docs.authlib.org/en/stable/client/starlette.html)
-- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/client/fastapi.html)
+  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/oauth1/client/http/httpx.html)
+  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#httpx-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#httpx-oauth-2-0)
+  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#async-service-account)
+- [Flask OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/flask.html)
+- [Django OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/django.html)
+- [Starlette OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/starlette.html)
+- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/fastapi.html)
 Build your own OAuth 1.0, OAuth 2.0, and OpenID Connect providers:
 - Flask
-  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/flask/1/)
-  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/flask/2/)
-  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/flask/2/openid-connect.html)
+  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/oauth1/provider/flask/index.html)
+  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/flask/index.html)
+  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/flask/openid-connect.html)
 - Django
-  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/django/1/)
-  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/django/2/)
-  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/django/2/openid-connect.html)
+  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/oauth1/provider/django/index.html)
+  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/django/index.html)
+  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/django/openid-connect.html)
 ## Useful Links

{authlib-1.7.1 → authlib-1.7.2}/Authlib.egg-info/SOURCES.txt RENAMED Viewed

@@ -15,6 +15,7 @@ authlib/deprecate.py
 authlib/common/__init__.py
 authlib/common/encoding.py
 authlib/common/errors.py
+authlib/common/language.py
 authlib/common/security.py
 authlib/common/urls.py
 authlib/integrations/__init__.py

{authlib-1.7.1 → authlib-1.7.2}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Authlib
-Version: 1.7.1
+Version: 1.7.2
 Summary: The ultimate Python library in building OAuth and OpenID Connect servers and clients.
 Author-email: Hsiaoming Yang <me@lepture.com>
 License: BSD-3-Clause
@@ -83,33 +83,33 @@ Authlib will deprecate `authlib.jose` module, please read:
 Generic, spec-compliant implementation to build clients and providers:
-- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/basic/oauth1.html)
-  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/specs/rfc5849.html)
-- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/basic/oauth2.html)
-  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/specs/rfc6749.html)
-  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/specs/rfc6750.html)
-  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/specs/rfc7009.html)
-  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/specs/rfc7523.html)
-  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/specs/rfc7591.html)
-  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/specs/rfc7592.html)
-  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/specs/rfc7636.html)
-  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/specs/rfc7662.html)
-  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/specs/rfc8414.html)
-  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/specs/rfc8628.html)
-  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/specs/rfc9068.html)
-  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/specs/rfc9101.html)
-  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/specs/rfc9207.html)
+- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/oauth1/index.html)
+  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/oauth1/specs/rfc5849.html)
+- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/oauth2/index.html)
+  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/oauth2/specs/rfc6749.html)
+  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/oauth2/specs/rfc6750.html)
+  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/oauth2/specs/rfc7009.html)
+  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/oauth2/specs/rfc7523.html)
+  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/oauth2/specs/rfc7591.html)
+  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/oauth2/specs/rfc7592.html)
+  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/oauth2/specs/rfc7636.html)
+  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/oauth2/specs/rfc7662.html)
+  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/oauth2/specs/rfc8414.html)
+  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/oauth2/specs/rfc8628.html)
+  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/oauth2/specs/rfc9068.html)
+  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/oauth2/specs/rfc9101.html)
+  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/oauth2/specs/rfc9207.html)
 - [Javascript Object Signing and Encryption](https://docs.authlib.org/en/stable/jose/index.html)
   - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/stable/jose/jws.html)
   - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/stable/jose/jwe.html)
   - [RFC7517: JSON Web Key](https://docs.authlib.org/en/stable/jose/jwk.html)
-  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/specs/rfc7518.html)
+  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/jose/specs/rfc7518.html)
   - [RFC7519: JSON Web Token](https://docs.authlib.org/en/stable/jose/jwt.html)
-  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/specs/rfc7638.html)
+  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/jose/specs/rfc7638.html)
   - [ ] RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
-  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/specs/rfc8037.html)
+  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/jose/specs/rfc8037.html)
   - [ ] draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
-- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/specs/oidc.html)
+- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/oauth2/specs/oidc.html)
   - [x] OpenID Connect Core 1.0
   - [x] OpenID Connect Discovery 1.0
   - [x] OpenID Connect Dynamic Client Registration 1.0
@@ -118,30 +118,30 @@ Generic, spec-compliant implementation to build clients and providers:
 Connect third party OAuth providers with Authlib built-in client integrations:
 - Requests
-  - [OAuth1Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-1-0)
-  - [OAuth2Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/stable/client/requests.html#requests-openid-connect)
-  - [AssertionSession](https://docs.authlib.org/en/stable/client/requests.html#requests-service-account)
+  - [OAuth1Session](https://docs.authlib.org/en/stable/oauth1/client/http/requests.html)
+  - [OAuth2Session](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-openid-connect)
+  - [AssertionSession](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-service-account)
 - HTTPX
-  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-1-0)
-  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
-  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/client/httpx.html#async-service-account)
-- [Flask OAuth Client](https://docs.authlib.org/en/stable/client/flask.html)
-- [Django OAuth Client](https://docs.authlib.org/en/stable/client/django.html)
-- [Starlette OAuth Client](https://docs.authlib.org/en/stable/client/starlette.html)
-- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/client/fastapi.html)
+  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/oauth1/client/http/httpx.html)
+  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#httpx-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#httpx-oauth-2-0)
+  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#async-service-account)
+- [Flask OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/flask.html)
+- [Django OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/django.html)
+- [Starlette OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/starlette.html)
+- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/fastapi.html)
 Build your own OAuth 1.0, OAuth 2.0, and OpenID Connect providers:
 - Flask
-  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/flask/1/)
-  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/flask/2/)
-  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/flask/2/openid-connect.html)
+  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/oauth1/provider/flask/index.html)
+  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/flask/index.html)
+  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/flask/openid-connect.html)
 - Django
-  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/django/1/)
-  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/django/2/)
-  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/django/2/openid-connect.html)
+  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/oauth1/provider/django/index.html)
+  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/django/index.html)
+  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/django/openid-connect.html)
 ## Useful Links

{authlib-1.7.1 → authlib-1.7.2}/README.md RENAMED Viewed

@@ -45,33 +45,33 @@ Authlib will deprecate `authlib.jose` module, please read:
 Generic, spec-compliant implementation to build clients and providers:
-- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/basic/oauth1.html)
-  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/specs/rfc5849.html)
-- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/basic/oauth2.html)
-  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/specs/rfc6749.html)
-  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/specs/rfc6750.html)
-  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/specs/rfc7009.html)
-  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/specs/rfc7523.html)
-  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/specs/rfc7591.html)
-  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/specs/rfc7592.html)
-  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/specs/rfc7636.html)
-  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/specs/rfc7662.html)
-  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/specs/rfc8414.html)
-  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/specs/rfc8628.html)
-  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/specs/rfc9068.html)
-  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/specs/rfc9101.html)
-  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/specs/rfc9207.html)
+- [The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/oauth1/index.html)
+  - [RFC5849: The OAuth 1.0 Protocol](https://docs.authlib.org/en/stable/oauth1/specs/rfc5849.html)
+- [The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/oauth2/index.html)
+  - [RFC6749: The OAuth 2.0 Authorization Framework](https://docs.authlib.org/en/stable/oauth2/specs/rfc6749.html)
+  - [RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage](https://docs.authlib.org/en/stable/oauth2/specs/rfc6750.html)
+  - [RFC7009: OAuth 2.0 Token Revocation](https://docs.authlib.org/en/stable/oauth2/specs/rfc7009.html)
+  - [RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://docs.authlib.org/en/stable/oauth2/specs/rfc7523.html)
+  - [RFC7591: OAuth 2.0 Dynamic Client Registration Protocol](https://docs.authlib.org/en/stable/oauth2/specs/rfc7591.html)
+  - [RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol](https://docs.authlib.org/en/stable/oauth2/specs/rfc7592.html)
+  - [RFC7636: Proof Key for Code Exchange by OAuth Public Clients](https://docs.authlib.org/en/stable/oauth2/specs/rfc7636.html)
+  - [RFC7662: OAuth 2.0 Token Introspection](https://docs.authlib.org/en/stable/oauth2/specs/rfc7662.html)
+  - [RFC8414: OAuth 2.0 Authorization Server Metadata](https://docs.authlib.org/en/stable/oauth2/specs/rfc8414.html)
+  - [RFC8628: OAuth 2.0 Device Authorization Grant](https://docs.authlib.org/en/stable/oauth2/specs/rfc8628.html)
+  - [RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://docs.authlib.org/en/stable/oauth2/specs/rfc9068.html)
+  - [RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)](https://docs.authlib.org/en/stable/oauth2/specs/rfc9101.html)
+  - [RFC9207: OAuth 2.0 Authorization Server Issuer Identification](https://docs.authlib.org/en/stable/oauth2/specs/rfc9207.html)
 - [Javascript Object Signing and Encryption](https://docs.authlib.org/en/stable/jose/index.html)
   - [RFC7515: JSON Web Signature](https://docs.authlib.org/en/stable/jose/jws.html)
   - [RFC7516: JSON Web Encryption](https://docs.authlib.org/en/stable/jose/jwe.html)
   - [RFC7517: JSON Web Key](https://docs.authlib.org/en/stable/jose/jwk.html)
-  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/specs/rfc7518.html)
+  - [RFC7518: JSON Web Algorithms](https://docs.authlib.org/en/stable/jose/specs/rfc7518.html)
   - [RFC7519: JSON Web Token](https://docs.authlib.org/en/stable/jose/jwt.html)
-  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/specs/rfc7638.html)
+  - [RFC7638: JSON Web Key (JWK) Thumbprint](https://docs.authlib.org/en/stable/jose/specs/rfc7638.html)
   - [ ] RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
-  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/specs/rfc8037.html)
+  - [RFC8037: ECDH in JWS and JWE](https://docs.authlib.org/en/stable/jose/specs/rfc8037.html)
   - [ ] draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
-- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/specs/oidc.html)
+- [OpenID Connect 1.0](https://docs.authlib.org/en/stable/oauth2/specs/oidc.html)
   - [x] OpenID Connect Core 1.0
   - [x] OpenID Connect Discovery 1.0
   - [x] OpenID Connect Dynamic Client Registration 1.0
@@ -80,30 +80,30 @@ Generic, spec-compliant implementation to build clients and providers:
 Connect third party OAuth providers with Authlib built-in client integrations:
 - Requests
-  - [OAuth1Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-1-0)
-  - [OAuth2Session](https://docs.authlib.org/en/stable/client/requests.html#requests-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/stable/client/requests.html#requests-openid-connect)
-  - [AssertionSession](https://docs.authlib.org/en/stable/client/requests.html#requests-service-account)
+  - [OAuth1Session](https://docs.authlib.org/en/stable/oauth1/client/http/requests.html)
+  - [OAuth2Session](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-openid-connect)
+  - [AssertionSession](https://docs.authlib.org/en/stable/oauth2/client/http/requests.html#requests-service-account)
 - HTTPX
-  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-1-0)
-  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
-  - [OpenID Connect](https://docs.authlib.org/en/stable/client/httpx.html#httpx-oauth-2-0)
-  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/client/httpx.html#async-service-account)
-- [Flask OAuth Client](https://docs.authlib.org/en/stable/client/flask.html)
-- [Django OAuth Client](https://docs.authlib.org/en/stable/client/django.html)
-- [Starlette OAuth Client](https://docs.authlib.org/en/stable/client/starlette.html)
-- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/client/fastapi.html)
+  - [AsyncOAuth1Client](https://docs.authlib.org/en/stable/oauth1/client/http/httpx.html)
+  - [AsyncOAuth2Client](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#httpx-oauth-2-0)
+  - [OpenID Connect](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#httpx-oauth-2-0)
+  - [AsyncAssertionClient](https://docs.authlib.org/en/stable/oauth2/client/http/httpx.html#async-service-account)
+- [Flask OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/flask.html)
+- [Django OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/django.html)
+- [Starlette OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/starlette.html)
+- [FastAPI OAuth Client](https://docs.authlib.org/en/stable/oauth2/client/web/fastapi.html)
 Build your own OAuth 1.0, OAuth 2.0, and OpenID Connect providers:
 - Flask
-  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/flask/1/)
-  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/flask/2/)
-  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/flask/2/openid-connect.html)
+  - [Flask OAuth 1.0 Provider](https://docs.authlib.org/en/stable/oauth1/provider/flask/index.html)
+  - [Flask OAuth 2.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/flask/index.html)
+  - [Flask OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/flask/openid-connect.html)
 - Django
-  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/django/1/)
-  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/django/2/)
-  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/django/2/openid-connect.html)
+  - [Django OAuth 1.0 Provider](https://docs.authlib.org/en/stable/oauth1/provider/django/index.html)
+  - [Django OAuth 2.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/django/index.html)
+  - [Django OpenID Connect 1.0 Provider](https://docs.authlib.org/en/stable/oauth2/authorization-server/django/openid-connect.html)
 ## Useful Links

authlib-1.7.2/authlib/common/language.py ADDED Viewed

@@ -0,0 +1,13 @@
+import re
+# Structurally validates BCP 47 language tags (RFC 5646).
+# Accepts private-use tags (x-...) and standard tags (2-8 alpha + optional subtags).
+# Does not validate subtags against the IANA registry.
+_LANGUAGE_TAG_RE = re.compile(
+    r"^(x(-[a-zA-Z0-9]{1,8})+|[a-zA-Z]{2,8}(-[a-zA-Z0-9]{1,8})*)$"
+)
+def is_valid_language_tag(tag):
+    """Return True if tag is a structurally valid BCP 47 language tag."""
+    return isinstance(tag, str) and bool(_LANGUAGE_TAG_RE.match(tag))

{authlib-1.7.1 → authlib-1.7.2}/authlib/consts.py RENAMED Viewed

@@ -1,5 +1,5 @@
 name = "Authlib"
-version = "1.7.1"
+version = "1.7.2"
 author = "Hsiaoming Yang <me@lepture.com>"
 homepage = "https://authlib.org"
 default_user_agent = f"{name}/{version} (+{homepage})"

{authlib-1.7.1 → authlib-1.7.2}/authlib/oauth2/rfc7523/assertion.py RENAMED Viewed

@@ -44,7 +44,7 @@ def sign_jwt_bearer_assertion(
     if claims:
         payload.update(claims)
-    return jwt.encode(header, payload, import_any_key(key))
+    return jwt.encode(header, payload, import_any_key(key), algorithms=[header["alg"]])
 def client_secret_jwt_sign(

{authlib-1.7.1 → authlib-1.7.2}/authlib/oauth2/rfc7523/auth.py RENAMED Viewed

@@ -1,5 +1,7 @@
 from joserfc.jwk import OctKey
 from joserfc.jwk import RSAKey
+from joserfc.jwk import ECKey
+from joserfc.jwk import OKPKey
 from authlib.common.urls import add_params_to_qs
@@ -100,7 +102,7 @@ class PrivateKeyJWT(ClientSecretJWT):
     alg = "RS256"
     def sign(self, auth, token_endpoint):
-        if isinstance(auth.client_secret, RSAKey):
+        if isinstance(auth.client_secret, (RSAKey, ECKey, OKPKey)):
             key = auth.client_secret
         else:
             key = RSAKey.import_key(auth.client_secret)

{authlib-1.7.1 → authlib-1.7.2}/authlib/oauth2/rfc8414/models.py RENAMED Viewed

@@ -1,3 +1,4 @@
+from authlib.common.language import is_valid_language_tag
 from authlib.common.security import is_secure_transport
 from authlib.common.urls import is_valid_url
 from authlib.common.urls import urlparse
@@ -208,7 +209,7 @@ class AuthorizationServerMetadata(dict):
         [RFC5646].  If omitted, the set of supported languages and scripts
         is unspecified.
         """
-        validate_array_value(self, "ui_locales_supported")
+        validate_language_tags_array(self, "ui_locales_supported")
     def validate_op_policy_uri(self):
         """OPTIONAL.  URL that the authorization server provides to the
@@ -411,6 +412,15 @@ def validate_array_value(metadata, key):
         raise ValueError(f'"{key}" MUST be JSON array')
+def validate_language_tags_array(metadata, key):
+    validate_array_value(metadata, key)
+    values = metadata.get(key)
+    if values is not None:
+        for tag in values:
+            if not is_valid_language_tag(tag):
+                raise ValueError(f'"{key}" MUST contain BCP 47 language tags')
 def validate_boolean_value(metadata, key):
     if key not in metadata:
         return

{authlib-1.7.1 → authlib-1.7.2}/authlib/oidc/core/claims.py RENAMED Viewed

@@ -6,6 +6,7 @@ from joserfc.errors import InvalidClaimError
 from joserfc.errors import MissingClaimError
 from authlib.common.encoding import to_bytes
+from authlib.common.language import is_valid_language_tag
 from authlib.oauth2.claims import JWTClaims
 from authlib.oauth2.rfc6749.util import scope_to_list
@@ -244,6 +245,12 @@ class UserInfo(dict):
         "phone": ["phone_number", "phone_number_verified"],
     }
+    def validate_locale(self):
+        """Validate the locale claim is a BCP 47 language tag."""
+        locale = self.get("locale")
+        if locale is not None and not is_valid_language_tag(locale):
+            raise ValueError('"locale" MUST be a BCP 47 language tag')
     def filter(self, scope: str):
         """Return a new UserInfo object containing only the claims matching the scope passed in parameter."""
         scope = scope_to_list(scope)

{authlib-1.7.1 → authlib-1.7.2}/authlib/oidc/discovery/models.py RENAMED Viewed

@@ -1,6 +1,7 @@
 from authlib.oauth2.rfc8414 import AuthorizationServerMetadata
 from authlib.oauth2.rfc8414.models import validate_array_value
 from authlib.oauth2.rfc8414.models import validate_boolean_value
+from authlib.oauth2.rfc8414.models import validate_language_tags_array
 class OpenIDProviderMetadata(AuthorizationServerMetadata):
@@ -236,7 +237,7 @@ class OpenIDProviderMetadata(AuthorizationServerMetadata):
         language tag values. Not all languages and scripts are necessarily
         supported for all Claim values.
         """
-        validate_array_value(self, "claims_locales_supported")
+        validate_language_tags_array(self, "claims_locales_supported")
     def validate_claims_parameter_supported(self):
         """OPTIONAL. Boolean value specifying whether the OP supports use of