Skip to main content

Invenio user management and authentication.

Project description

https://img.shields.io/github/license/inveniosoftware/invenio-accounts.svg https://github.com/inveniosoftware/invenio-accounts/workflows/CI/badge.svg https://img.shields.io/coveralls/inveniosoftware/invenio-accounts.svg https://img.shields.io/pypi/v/invenio-accounts.svg

Invenio user management and authentication.

Features:

  • User and role management.

  • User registration, password reset/recovery and email verification.

  • Administration interface and CLI for managing users.

  • Session based authentication with session theft protection as well as “remember me” support.

  • Strong cryptographic password hashing with support for migrating password hashes (including Invenio v1.x) to new stronger algorithms.

  • Session activity tracking allowing users to e.g. logout of all devices.

  • Server-side session management.

  • JSON Web Token encoding and decoding support useful for e.g. CSRF-protection in REST APIs.

Invenio-Accounts relies on the following community packages to do all the heavy-lifting:

Further documentation is available on https://invenio-accounts.readthedocs.io/

Changes

Version 1.4.1 (released 2020-12-10)

  • Fixes styling of forgot password form in semantic ui theme.

Version 1.4.0 (released 2020-12-09)

  • Major: adds new Semantic UI theme.

  • Adds Turkish translations.

  • Fixes next parameter being used in the sign-up form.

  • Fixes issue with translation files causing translations not to be picked up.

  • Fixes wording from sign in to log in.

  • Removes password length validation during login.

Version 1.3.0 (released 2020-05-15)

  • Refreshes the CSRF token on login and logout.

  • Removes the example app.

  • Migrate from Flask-KVSession to Flask-KVSession-Invenio, fork of the former.

Version 1.2.2 (released 2020-05-13)

This release was removed from PyPI on 2020-05-15 due to issues with the release.

Version 1.2.1 (released 2020-04-28)

  • Fixes issue with the latest WTForms v2.3.x release which now requires an extra library for email validation.

Version 1.2.0 (released 2020-03-09)

  • Replaces Flask dependency with centrally managed invenio-base

Version 1.1.4 (released 2020-04-28)

  • Fixes issue with the latest WTForms v2.3.x release which now requires an extra library for email validation.

Version 1.1.3 (released 2020-02-19)

  • Replaces Flask-CeleryExt to invenio-celery due to version incompatibilities with celery, kombu. Removes Flask-BabelExt already provided by invenio-i18n

Version 1.1.2 (released 2020-02-12)

  • Fixes requirements for Flask, Werkzeug and Flask-Login due to incompatibilities of latest released modules.

Version 1.1.1 (released 2019-03-10)

  • Fixes an issue where the HTTP headers X-Session-ID and X-User-ID are added even if the value is not known. This causes ‘None’ to be logged in Nginx, instead of simply ‘-‘.

Version 1.1.0 (released 2019-02-15)

  • Added support for for adding the user id and session id of the current user into the HTTP headers (X-User-ID and X-Session-ID) for upstream servers to use. For instance, this way current user/session ids can be logged by Nginx into the web server access logs. The feature is off by default and can be enabled via the ACCOUNTS_USERINFO_HEADERS configuration variable. Note: The upstream server should strip the two headers from the response returned to the client. The purpose is purely to allow upstream proxies like Nginx to log the user/session id for a specific request.

  • Changed token expiration from 5 days to 30 minutes for the password reset token and email confirmation token. Using the tokens will as a side-effect login in the user, which means that if the link is leaked (e.g. forwarded by the users themselves), then another person can use the link to access the account. Flask-Security v3.1.0 addresses this issue, but has not yet been released.

  • Fixes issue that could rehash the user password in the adminstration interface.

Version 1.0.2 (released 2018-10-31)

  • Added AnonymousIdentity loader to app initialisation to fix the any_user Need in Invenio-Access.

Version 1.0.1 (released 2018-05-25)

  • Bumped Flask-CeleryExt from v0.3.0 to v0.3.1 to fix issue with Celery version string not being parsable and thus causing problems with installing Celery.

Version 1.0.0 (released 2018-03-23)

  • Initial public release.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

invenio-accounts-1.4.1.tar.gz (125.4 kB view details)

Uploaded Source

Built Distribution

invenio_accounts-1.4.1-py2.py3-none-any.whl (87.9 kB view details)

Uploaded Python 2 Python 3

File details

Details for the file invenio-accounts-1.4.1.tar.gz.

File metadata

  • Download URL: invenio-accounts-1.4.1.tar.gz
  • Upload date:
  • Size: 125.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.6.1 requests/2.25.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.54.1 CPython/3.8.6

File hashes

Hashes for invenio-accounts-1.4.1.tar.gz
Algorithm Hash digest
SHA256 57f2c254ea51e80aa0ee40350826cda8a3c520fc22f966d38b0842a5af8dc222
MD5 2ebf06c072acabb00ebf42497c2223fd
BLAKE2b-256 a9a2c185950c011600e1c01b177930e556aa3faa9a0a72be65d47efdbb058b9d

See more details on using hashes here.

Provenance

File details

Details for the file invenio_accounts-1.4.1-py2.py3-none-any.whl.

File metadata

  • Download URL: invenio_accounts-1.4.1-py2.py3-none-any.whl
  • Upload date:
  • Size: 87.9 kB
  • Tags: Python 2, Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.6.1 requests/2.25.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.54.1 CPython/3.8.6

File hashes

Hashes for invenio_accounts-1.4.1-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 3794a53f4e165ed343cc841114d8707f5c7713b3a05e5e6fb96a19cba4608a66
MD5 92123a9aff1601d5bb1fe790fce91522
BLAKE2b-256 20b6074fb54a351990a06d19ba5cae4d556490a697381877b8cec5b28a4d2ba9

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page