- Removed support for Django 3.0 and 3.1
- Added support for Django 4.1 and 4.2
- Added support for Python 3.11
- Fixed metadata lookup for devices with device certificate directly in MDS
- Changed redirect after adding authenticator in administration to changelist instead of change view
- Made
user_handle
in admin readonly - Upgrade to nodejs 18.x
- Fixed resident key registration
- Add support for fido2 1.1
- Drop support for fido2 < 1.1
- Export js translations for optional modifications
- Pin fido2 dependency
- Add support for fido2 1.0
- Drop support for fido2 < 1.0
- Provide fido2 JS functions without side effects
- Handle InvalidStateError
- Drop
FIDO_CERTIFIED
fromAUTH_LEVELS
- Export createTranslations function in fido2.js
- Fix reversing of the order of statusReports in metadata
- Pin fido2 to ~= 0.9
- Drop support for Django 2.x
- Fix package build with setuptools-npm
- Fix uncaught exception when user does not exist
- Fix Authenticator.metadata if no identifier is present
- Added passwordless auth backend
- Drop support for Django 1.11
- Drop support for python 3.5
- Sets a default_auto_field
- Fix django.conf.urls deprecation warnings
- Added user_handle field to Authenticator model
- Added DJANGO_FIDO_RESIDENT_KEY (default False) app setting
- Restructured js handling key registration and exposed additional functions
- Sort users in admin Authenticator add form by username
- Sort statusReport dictionary in metadata
- Change authenticate request arg to positional
- Fix metadata for empty credential_data
- Bump path-parse from 1.0.6 to 1.0.7
- Proper cleanup of database model under MDS3
- Fix MDS3 metadata verification
- Support for MDSv3 AuthenticatorMetadata
- Fix authentication for devices without counter support
- Support for
fido2
library>0.9.0
- Add tests under django 3.1
- Handle when multiple device metadata are returned
- JS fixes and updates
- Counter is now stored as BigInteger.
- Restrict version of
fido2
library to<0.9.0
.
- Catch
InvalidAttestation
error in registration view.
- Updated error strings to be more informative.
- Throw form error on unknown attestation format instead of a server error.
- Improve metadata matching for U2F authenticators.
- BREAKING - AuthenticatorMetadata are now looked up by URL and not by an identifier. If you are downloading metadata, you need to clear them all and re-download to prevent multiple objects for each authenticator.
- Update JS dependencies
- Metadata validation
- Display no authenticator error
error
key in repsponse ofBaseFido2RequestView
is now deprecated and will be removed in the future- Added metadata download and reporting
- Use username as a backup
displayName
- Create FIDO errors list when needed unless it already exists
- Clear FIDO errors list before each registration or authentication request
- Fix Django 3.0 compatibility issues in templates
- Added class attribute
attestation_types
toFido2ViewMixin
to specify allowed attestation types during registration. - Set default value of setting
DJANGO_FIDO_AUTHENTICATION_BACKENDS
to list containingdjango.contrib.auth.backends.ModelBackend
- Fix issue caused by default value of
DJANGO_FIDO_AUTHENTICATION_BACKENDS
. It is now empty list.
- BREAKING Replace
Fido2ModelAuthenticationBackend
with more generalFido2GeneralAuthenticationBackend
.
- BREAKING Authenticator
label
has to be unique for user. This can potentialy break if you have multiple tokens for user. - Add authenticator admin.
- Add one step authentication.
- Add
DJANGO_FIDO_RP_NAME
setting. - Add back autosubmit on login view.
- Display error in login view on server request error.
- Add label to Authenticator model.
- Remove autosubmit on registration view.
- Update JS dependencies.
- Support fido2 0.6-0.8.
- Add support for python 3.8.
- Fixup annotations.
- Fix dependencies (add webpack-cli).
- Fix webpack output path.
- Fix dependencies (add webpack).
- Refactor JS code.
- Update setup.
- Add bumpversion.
- Fix JS translation lazynes.
- For empty values, submit button reload page.
- Add credential ID field.
- Drop
credential_data
field. - Update error messages.
- Mark django-fido as typed.
- Add JS hooks.
- Use FIDO 2 instead of U2F.
- Drop python 2.7.
- Add annotations and mypy check.
- Move repository to a CZ.NIC account.
- Fix JS translation lazynes
- Update JS messages.
- Drop unused
polint
environment in tox.
- Store attestation certificate in database #6
- Install package data #7
- Accept any arguments in
BaseU2fRequestView.get
- Add czech translations
- Fix links in README
- Initial version