File python-django-allauth.changes of Package python-django-allauth

-------------------------------------------------------------------
Wed Aug 20 11:01:31 UTC 2025 - Jürgen Löhel <juergen@loehel.de>

- Update to version 65.11.0:
  * Note worthy changes
    * OpenID Connect: using fetch_userinfo=False you can now skip the additional call to the userinfo endpoint. Instead, the ID token will be used.
  * Fixes
    * Headless: passwordless signup was not supported, fixed.
    * Headless: when serializing the user nested dataclasses, as well as optional types ended up as string type, fixed.
    * When signing up with a social account no authentication record was added to the session, fixed.
  * Backwards incompatible changes
    * OpenID Connect: the ID token and userinfo (when present) are now stored in SocialAccount.extra_data, below the respective "id_token" and "userinfo" keys. Compatibility with extra_data from existing accounts that do not have this new structure is retained. However, if your own project expects extra_data to be in a certain format this change may impact you.

-------------------------------------------------------------------
Wed Aug 20 10:59:50 UTC 2025 - Jürgen Löhel <juergen@loehel.de>

- Update to version 65.10.0:
  * Note worthy changes
    * IdP: Added support for the device authorization grant.
    * Headless: custom user payloads can now be properly reflected in the OpenAPI specification by provider a user dataclass. See the newly introduced get_user_dataclass() and user_as_dataclass() adapter methods.
    * Added a new signal (authentication_step_completed) that is emitted when an individual authentication step is completed.
    * MFA: Added a setting (MFA_ALLOW_UNVERIFIED_EMAIL) to allow unverified email addresses in combination with MFA.
  * Backwards incompatible changes
    * Soundcloud: as per https://developers.soundcloud.com/blog/urn-num-to-string, the provider now uses the user urn instead of the id as the ID for social accounts. This change is backward incompatible. Instructions on how to migrate existing social accounts can be found in the allauth provider documentation for SoundCloud.
  * Fixes
    * Phone: The recently added support for phone (SMS) authentication did fully integrate with third-party provider signups. For example, whether or not the phone number is required was not respected during signup. Fixed.
    * IdP: Token revocation failed when a single token_type_hint was passed, fixed.
    * The verified_email_required decorator did not support email verification by code. Additionally, it did not rate limit verification emails in case of GET requests. Both are fixed.
    * The account adapter clean_email() method was not called when a social account auto signup took place, fixed.

-------------------------------------------------------------------
Fri Jun 13 06:37:14 UTC 2025 - Jürgen Löhel <juergen@loehel.de>

- initial commit