plain.oauth 0.24.2__py3-none-any.whl → 0.25.1__py3-none-any.whl

plain/oauth/CHANGELOG.md

@@ -1,5 +1,25 @@
 # plain-oauth changelog
 
+## [0.25.1](https://github.com/dropseed/plain/releases/plain-oauth@0.25.1) (2025-08-22)
+
+### What's changed
+
+- Updated admin navigation to place icons on sections rather than individual items ([5a6479a](https://github.com/dropseed/plain/commit/5a6479ac79))
+
+### Upgrade instructions
+
+- No changes required
+
+## [0.25.0](https://github.com/dropseed/plain/releases/plain-oauth@0.25.0) (2025-08-19)
+
+### What's changed
+
+- Removed requirement for manual `{{ csrf_input }}` in OAuth forms - CSRF protection now uses `Sec-Fetch-Site` headers automatically ([9551508](https://github.com/dropseed/plain/commit/955150800c))
+
+### Upgrade instructions
+
+- Remove `{{ csrf_input }}` from any OAuth forms in your templates (login, connect, disconnect forms) - CSRF protection is now handled automatically
+
 ## [0.24.2](https://github.com/dropseed/plain/releases/plain-oauth@0.24.2) (2025-08-05)
 
 ### What's changed

plain/oauth/README.md

@@ -141,7 +141,6 @@ Then add a login button (which is a form using POST rather than a basic link, fo
 ```html
 <h1>Login</h1>
 <form action="{% url 'oauth:login' 'github' %}" method="post">
-    {{ csrf_input }}
     <button type="submit">Login with GitHub</button>
 </form>
 ```
@@ -191,7 +190,6 @@ Hello {{ request.user }}!
     <li>
         {{ connection.provider_key }} [ID: {{ connection.provider_user_id }}]
         <form action="{% url 'oauth:disconnect' connection.provider_key %}" method="post">
-            {{ csrf_input }}
             <input type="hidden" name="provider_user_id" value="{{ connection.provider_user_id }}">
             <button type="submit">Disconnect</button>
         </form>
@@ -205,7 +203,6 @@ Hello {{ request.user }}!
     <li>
         {{ provider_key}}
         <form action="{% url 'oauth:connect' provider_key %}" method="post">
-            {{ csrf_input }}
             <button type="submit">Connect</button>
         </form>
     </li>

plain/oauth/admin.py

@@ -37,9 +37,9 @@ class ProvidersChartCard(ChartCard):
 class OAuthConnectionViewset(AdminViewset):
     class ListView(AdminModelListView):
         nav_section = "OAuth"
+        nav_icon = "link-45deg"
         model = OAuthConnection
         title = "Connections"
-        nav_icon = "link-45deg"
         fields = ["id", "user", "provider_key", "provider_user_id"]
         cards = [ProvidersChartCard]
 

{plain_oauth-0.24.2.dist-info → plain_oauth-0.25.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plain.oauth
-Version: 0.24.2
+Version: 0.25.1
 Summary: Let users log in with OAuth providers.
 Author-email: Dave Gaeddert <dave.gaeddert@dropseed.dev>
 License-Expression: BSD-3-Clause
@@ -155,7 +155,6 @@ Then add a login button (which is a form using POST rather than a basic link, fo
 ```html
 <h1>Login</h1>
 <form action="{% url 'oauth:login' 'github' %}" method="post">
-    {{ csrf_input }}
     <button type="submit">Login with GitHub</button>
 </form>
 ```
@@ -205,7 +204,6 @@ Hello {{ request.user }}!
     <li>
         {{ connection.provider_key }} [ID: {{ connection.provider_user_id }}]
         <form action="{% url 'oauth:disconnect' connection.provider_key %}" method="post">
-            {{ csrf_input }}
             <input type="hidden" name="provider_user_id" value="{{ connection.provider_user_id }}">
             <button type="submit">Disconnect</button>
         </form>
@@ -219,7 +217,6 @@ Hello {{ request.user }}!
     <li>
         {{ provider_key}}
         <form action="{% url 'oauth:connect' provider_key %}" method="post">
-            {{ csrf_input }}
             <button type="submit">Connect</button>
         </form>
     </li>

{plain_oauth-0.24.2.dist-info → plain_oauth-0.25.1.dist-info}/RECORD

@@ -1,7 +1,7 @@
-plain/oauth/CHANGELOG.md,sha256=t9_ijwUrVBdQq1kwWZflh-91sqJccWrcc8e-Ovg8Oec,1986
-plain/oauth/README.md,sha256=SUIbWnuka9mAJFOPTkrtW2KmKLAOYn5vMpT1VesPWPk,11156
+plain/oauth/CHANGELOG.md,sha256=6Qzh3TXra_ykDhgWyZKmRZh9WztYvhNnzm6w8HUJ6QM,2777
+plain/oauth/README.md,sha256=m3RRb01DLnoxBtzuYzESSe49OmsZ8P1R5_QsfCSRQgo,11077
 plain/oauth/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-plain/oauth/admin.py,sha256=9DAku8ubV6a_ByFer6UBS0G1cC_gGGHiI_iRP0b78nE,1310
+plain/oauth/admin.py,sha256=G1DFqGr5AEMbgVG689uGPC0YBD6gLifoz67yUOmslvs,1310
 plain/oauth/config.py,sha256=0Q4IILBKQbIaxqeL9WRTH5Cka-BO3c3SOj1AdQIAJgc,167
 plain/oauth/default_settings.py,sha256=dlN1J9vSOjjxPNLp-0qe-cLTqwM4E69ZAx_8lpxMhaM,28
 plain/oauth/exceptions.py,sha256=yoZsq8XgzstuwbE2ihoet0nzpw_sVZgDrwUauh6hhUs,546
@@ -12,7 +12,7 @@ plain/oauth/views.py,sha256=J2NCa37YediBTi82CfRlmsb45hFT6gWN6zMaFHhsDMM,2410
 plain/oauth/migrations/0001_initial.py,sha256=0NjfF7F3szhUXkpK3JvN10Xkat1QR-VvnX6Oed9iFmo,1940
 plain/oauth/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 plain/oauth/templates/oauth/callback.html,sha256=4CJG0oAN0xYjw2IPkjaL7B4hwlf9um9LI4CTu50E-yE,173
-plain_oauth-0.24.2.dist-info/METADATA,sha256=4wEMvZsEaJXj9V8-FnSVQt7dGhLExWZFKjhw0O1ObII,11561
-plain_oauth-0.24.2.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-plain_oauth-0.24.2.dist-info/licenses/LICENSE,sha256=cvKM3OlqHx3ijD6e34zsSUkPvzl-ya3Dd63A6EHL94U,1500
-plain_oauth-0.24.2.dist-info/RECORD,,
+plain_oauth-0.25.1.dist-info/METADATA,sha256=CRarRZlMr082RD80RN_yQv-kSo8-jNO_XTARBUtr-eE,11482
+plain_oauth-0.25.1.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+plain_oauth-0.25.1.dist-info/licenses/LICENSE,sha256=cvKM3OlqHx3ijD6e34zsSUkPvzl-ya3Dd63A6EHL94U,1500
+plain_oauth-0.25.1.dist-info/RECORD,,