plain.auth 0.20.5__tar.gz → 0.20.7__tar.gz

{plain_auth-0.20.5 → plain_auth-0.20.7}/.gitignore

@@ -1,5 +1,5 @@
 .venv
-.env
+/.env
 *.egg-info
 *.py[co]
 __pycache__

{plain_auth-0.20.5 → plain_auth-0.20.7}/PKG-INFO

@@ -1,8 +1,9 @@
 Metadata-Version: 2.4
 Name: plain.auth
-Version: 0.20.5
+Version: 0.20.7
 Summary: Add users to your app and decide what they can access.
 Author-email: Dave Gaeddert <dave.gaeddert@dropseed.dev>
+License-Expression: BSD-3-Clause
 License-File: LICENSE
 Requires-Python: >=3.13
 Requires-Dist: plain-models<1.0.0

{plain_auth-0.20.5 → plain_auth-0.20.7}/plain/auth/CHANGELOG.md

@@ -1,5 +1,25 @@
 # plain-auth changelog
 
+## [0.20.7](https://github.com/dropseed/plain/releases/plain-auth@0.20.7) (2025-10-31)
+
+### What's changed
+
+- Added `license = "BSD-3-Clause"` field to `pyproject.toml` for improved package metadata ([8477355](https://github.com/dropseed/plain/commit/8477355e65))
+
+### Upgrade instructions
+
+- No changes required
+
+## [0.20.6](https://github.com/dropseed/plain/releases/plain-auth@0.20.6) (2025-10-22)
+
+### What's changed
+
+- Fixed impersonation check in `AuthViewMixin` to properly handle optional `plain-admin` dependency using `get_request_impersonator()` function instead of `getattr()` ([548a385](https://github.com/dropseed/plain/commit/548a3859f5))
+
+### Upgrade instructions
+
+- No changes required
+
 ## [0.20.5](https://github.com/dropseed/plain/releases/plain-auth@0.20.5) (2025-10-20)
 
 ### What's changed

{plain_auth-0.20.5 → plain_auth-0.20.7}/plain/auth/views.py

@@ -23,6 +23,11 @@ from .utils import resolve_url
 if TYPE_CHECKING:
     from plain.http import Request
 
+try:
+    from plain.admin.impersonate import get_request_impersonator
+except ImportError:
+    get_request_impersonator: Any = None
+
 
 class LoginRequired(Exception):
     def __init__(self, login_url: str | None = None, redirect_field_name: str = "next"):
@@ -65,14 +70,17 @@ class AuthViewMixin(SessionViewMixin):
         if self.admin_required:
             # At this point, we know user is authenticated (from check above)
             # Check if impersonation is active
-            if impersonator := getattr(self, "impersonator", None):
-                # Impersonators should be able to view admin pages while impersonating.
-                # There's probably never a case where an impersonator isn't admin, but it can be configured.
-                if not impersonator.is_admin:
-                    raise PermissionDenied(
-                        "You do not have permission to access this page."
-                    )
-            elif not self.user.is_admin:
+            if get_request_impersonator:
+                if impersonator := get_request_impersonator(self.request):
+                    # Impersonators should be able to view admin pages while impersonating.
+                    # There's probably never a case where an impersonator isn't admin, but it can be configured.
+                    if not impersonator.is_admin:
+                        raise PermissionDenied(
+                            "You do not have permission to access this page."
+                        )
+                    return
+
+            if not self.user.is_admin:
                 # Show a 404 so we don't expose admin urls to non-admin users
                 raise Http404()
 

{plain_auth-0.20.5 → plain_auth-0.20.7}/pyproject.toml

@@ -1,9 +1,10 @@
 [project]
 name = "plain.auth"
-version = "0.20.5"
+version = "0.20.7"
 description = "Add users to your app and decide what they can access."
 authors = [{name = "Dave Gaeddert", email = "dave.gaeddert@dropseed.dev"}]
 readme = "README.md"
+license = "BSD-3-Clause"
 requires-python = ">=3.13"
 dependencies = [
     "plain<1.0.0",