Flask-Middleware/flask-security issues and pull requests

#899 - Two-factor simplification and improvements.

Pull Request - State: closed - Opened by jwag956 9 months ago - 1 comment

#898 - Allow override of Username

Pull Request - State: closed - Opened by coolacid 9 months ago - 1 comment

#897 - Fix (again) possible open redirect vulnerability.

Pull Request - State: closed - Opened by jwag956 9 months ago - 1 comment

#896 - Fix (again) possible open redirect vulnerability.

Pull Request - State: closed - Opened by jwag956 9 months ago - 1 comment

#895 - oauth improvements.

Pull Request - State: closed - Opened by jwag956 9 months ago - 1 comment

#894 - oauth and two factor and spa don't play together

Issue - State: open - Opened by jwag956 9 months ago
Labels: bug

#893 - Open redirect possibility with newer werkzeug

Issue - State: closed - Opened by jwag956 9 months ago - 2 comments
Labels: bug, Security-Issue

#892 - Update Spanish and Italian translations

Pull Request - State: closed - Opened by gissimo 9 months ago - 1 comment

#891 - Allowed the oauth login to work with spa

Pull Request - State: closed - Opened by mmillmore 10 months ago - 2 comments

#890 - Error / Confirmation message not showing

Issue - State: closed - Opened by mominur-helios 10 months ago - 1 comment

#889 - Improve support for 2FA and unified signin method localizations.

Pull Request - State: closed - Opened by jwag956 10 months ago - 2 comments

#888 - Docs: set_db_info

Issue - State: closed - Opened by sr-verde 10 months ago - 2 comments
Labels: documentation

#887 - Override model ID field to UUID

Issue - State: closed - Opened by mominur-helios 10 months ago - 3 comments

#886 - Update German translations

Pull Request - State: closed - Opened by sr-verde 10 months ago - 1 comment

#885 - more localization for two-factor

Pull Request - State: closed - Opened by gissimo 10 months ago - 6 comments

#884 - Login via social/oauth not respecting SECURITY_REDIRECT_HOST

Issue - State: closed - Opened by mmillmore 10 months ago - 7 comments
Labels: bug

#883 - ValueError: The name 'security' is already registered for a different blueprint. Use 'name=' to provide a unique name.

Issue - State: closed - Opened by princerb 10 months ago - 3 comments

#882 - Support Flask[async]

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#881 - Invert unauthenticated handling.

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#880 - Allow two-factor to work without sessions

Issue - State: closed - Opened by jwag956 11 months ago - 1 comment
Labels: enhancement

#879 - Add support for Flask[async]

Issue - State: closed - Opened by jwag956 11 months ago
Labels: enhancement

#878 - Remove long-deprecated _unauthorized_callback method.

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#877 - Add support for not using on AnonymousUser.

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#876 - Remove create_user side effects by copying roles list

Pull Request - State: closed - Opened by NoRePercussions 11 months ago - 1 comment

#875 - user_datastore.create_user has side effects on mutable inputs

Issue - State: closed - Opened by NoRePercussions 11 months ago

#873 - Spanish and Italian translations

Pull Request - State: closed - Opened by gissimo 11 months ago - 1 comment

#871 - Documentation around session cookies

Issue - State: closed - Opened by jwag956 11 months ago
Labels: documentation

#870 - change password gives 400 missing CSRF Token with CSRF protection disabled

Issue - State: closed - Opened by lilz-egoto 11 months ago - 2 comments
Labels: bug

#869 - Can't use authentication token for enabling 2fa as an authenticated user

Issue - State: closed - Opened by lilz-egoto 11 months ago - 4 comments

#868 - /register works with multipart/form-data

Issue - State: closed - Opened by lilz-egoto 11 months ago - 2 comments

#867 - Fix us-sign magic link to use fs_uniquifier.

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#866 - Ready for 5.3.2

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#865 - Deprecate passing in anonymous_user class.

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#864 - Fix tf-validate returning authorization_token.

Pull Request - State: closed - Opened by jwag956 11 months ago - 1 comment

#863 - Fix quickstart to show how to properly handle connections.

Pull Request - State: closed - Opened by jwag956 12 months ago - 1 comment

#862 - problem with spa: Reset email link is sent in terms of flask server name

Issue - State: closed - Opened by lilz-egoto 12 months ago - 1 comment

#861 - authentication token not returned when logging in with 2fa enabled

Issue - State: closed - Opened by lilz-egoto 12 months ago - 3 comments
Labels: bug

#860 - Authentication token doesn't work with endpoints that require authentication

Issue - State: closed - Opened by lilz-egoto 12 months ago - 7 comments

#859 - SQLAlchemy QueuePool limit TimeoutError

Issue - State: closed - Opened by jreinhar3dt 12 months ago - 9 comments
Labels: documentation

#858 - Ready for 5.3.1

Pull Request - State: closed - Opened by jwag956 12 months ago - 1 comment

#857 - Some improvements for reducing cyclomatic complexity of the function.

Pull Request - State: closed - Opened by Denterry 12 months ago - 1 comment

#856 - Some improvements

Pull Request - State: closed - Opened by Denterry 12 months ago

#855 - Some improvements for reducing cyclomatic complexity of the function …

Pull Request - State: closed - Opened by Denterry 12 months ago

#854 - Fix form.next for newer authentication mechanisms - including two-fac…

Pull Request - State: closed - Opened by jwag956 12 months ago - 1 comment

#853 - form.next not propagated through two-factor

Issue - State: closed - Opened by jwag956 12 months ago
Labels: bug

#852 - propagate next_loc through the 2fa login process

Pull Request - State: closed - Opened by cariaso 12 months ago - 2 comments

#851 - Update to latest webauthn (1.11)

Pull Request - State: closed - Opened by jwag956 12 months ago - 1 comment

#850 - Flask-Security-Too 5.3.0 is not compatible with Werkzeug 3.0.0 and Flask 3.0.0

Issue - State: closed - Opened by fabianmathias 12 months ago - 2 comments

#849 - Ready for 5.3.1

Pull Request - State: closed - Opened by jwag956 12 months ago - 1 comment

#848 - flask 3.0 support

Pull Request - State: closed - Opened by wangsha 12 months ago - 1 comment

#847 - ImportError: cannot import name 'Markup' from 'flask'

Issue - State: closed - Opened by nhatdt51 12 months ago

#846 - Update Markup import from flask to markupsafe

Pull Request - State: closed - Opened by nacerwadghiri 12 months ago

#845 - US via email does not respect non-email identities

Issue - State: closed - Opened by NoRePercussions 12 months ago - 2 comments

#844 - Bump webauthn from 1.9.0 to 1.11.0 in /requirements

Pull Request - State: closed - Opened by dependabot[bot] 12 months ago - 1 comment
Labels: dependencies

#843 - App won't run after upgrading werkzeug

Issue - State: closed - Opened by Calabashmc 12 months ago - 2 comments

#842 - Revert Referrer-Policy header commit.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#841 - Force User to Change Password

Issue - State: closed - Opened by petemarvin about 1 year ago - 2 comments

#840 - Bump webauthn from 1.9.0 to 1.10.1 in /requirements

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies

#839 - Updates for latest.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#838 - Update quickstart.rst

Pull Request - State: closed - Opened by robpearlman about 1 year ago - 2 comments

#837 - Replace save with update

Pull Request - State: closed - Opened by idoshr about 1 year ago - 3 comments

#836 - Fix import typo in quickstart guide

Pull Request - State: closed - Opened by codycollier about 1 year ago - 2 comments

#835 - Updated hy_AM translations

Pull Request - State: closed - Opened by amkrtchyan-tmp about 1 year ago - 2 comments

#834 - current_user not set in test with newer version of flask-login

Issue - State: closed - Opened by nhoening about 1 year ago - 7 comments

#833 - Tests fails after upgrading from FS 4 to 5 ( werkzeug.test.ClientRedirectError: Loop detected: A 302 redirect to / was already made.)

Issue - State: closed - Opened by amkrtchyan-tmp about 1 year ago - 9 comments

#832 - Unable to login with username

Issue - State: closed - Opened by NexPlex about 1 year ago - 1 comment

#831 - Update German translations

Pull Request - State: closed - Opened by sr-verde about 1 year ago - 2 comments

#830 - Missing </a> Tag in _menu.html Template

Issue - State: closed - Opened by pschlosser about 1 year ago - 1 comment
Labels: bug

#829 - Production doesn't login after confirmation but dev server does

Issue - State: closed - Opened by dadiletta about 1 year ago - 9 comments

#828 - Update sphinx requirement from ~=7.1 to ~=7.2 in /requirements

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#827 - Final tweaks for 5.3

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#826 - Improve Social Oauth example code.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#825 - Fix login and unified signin templates to send CSRF tokens.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#824 - Update sphinx requirement from ~=7.0 to ~=7.1 in /requirements

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies

#823 - TWO_FACTOR_VALIDITY changes.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#822 - tf_validity_cookie not deleted on logout

Issue - State: closed - Opened by jwag956 about 1 year ago - 1 comment
Labels: bug

#820 - Change confirmation to default to NOT auto-login.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#819 - Convert distribution build to 'build'

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#817 - Improve /confirm w.r.t. OWASP

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#816 - Improve /reset w.r.t. OWASP

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#815 - Improve /reset and /confirm w.r.t. GENERIC_RESPONSES and additional f…

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#814 - Generic responses lead to UX degradation

Issue - State: closed - Opened by quaxsze about 1 year ago - 2 comments
Labels: bug

#813 - Fix session-only authentication.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#812 - Fix #806 - Login shouldn't attempt email delivery validation.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#811 - Webauthn issue : 'AuthenticatorSelectionCriteria' is not defined

Issue - State: closed - Opened by level09 about 1 year ago - 6 comments

#810 - Fix SQLAlchemy scoped session Quickstart documentation.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#809 - Fix MongoDB support.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#808 - Update pydantic requirement from <2.0 to <3.0 in /requirements

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 2 comments
Labels: dependencies

#807 - Update webauthn transports support.

Pull Request - State: closed - Opened by jwag956 about 1 year ago - 1 comment

#806 - Login should not validate email addresses

Issue - State: closed - Opened by immanuel-h over 1 year ago - 4 comments
Labels: bug

#804 - SECURITY_CONFIRMABLE and Confirm Password

Issue - State: closed - Opened by hrishikeshrt over 1 year ago - 2 comments

#802 - Timeout on AWS Lambda+API Gateway

Issue - State: closed - Opened by asaarashi over 1 year ago - 2 comments

#801 - Outdated documentation for permissions field in Quickstart guide

Issue - State: closed - Opened by lliendo over 1 year ago - 1 comment
Labels: documentation

#800 - Bump cryptography from 40.0.2 to 41.0.0 in /requirements_low

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies

#799 - Unable to prevent flask-security to auto login after registration.

Issue - State: closed - Opened by parthjeet over 1 year ago - 3 comments

#798 - Is SECURITY_TOKEN_MAX_AGE working ?

Issue - State: closed - Opened by vpl-profess over 1 year ago - 1 comment

#796 - Adding user attributes after successful login?

Issue - State: closed - Opened by esranonff over 1 year ago - 3 comments
Labels: question

#795 - Final 5.2 prep.

Pull Request - State: closed - Opened by jwag956 over 1 year ago - 1 comment

#794 - [Flask-Middleware/flask-security#791] Fix for token-authentication on session-authentcation-only endpoint

Pull Request - State: closed - Opened by N247S over 1 year ago - 9 comments

#793 - Getting ready for 5.2

Pull Request - State: closed - Opened by jwag956 over 1 year ago - 1 comment

GitHub / Flask-Middleware/flask-security issues and pull requests