CVS commit: pkgsrc/www/py-django-allauth

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun 10 07:28:52 UTC 2024

Modified Files:
        pkgsrc/www/py-django-allauth: Makefile PLIST distinfo

Log Message:
py-django-allauth: updated to 0.63.3

0.63.3 (2024-05-31)
*******************

Note worthy changes
-------------------

- In ``HEADLESS_ONLY`` mode, the ``/accounts/<provider>/login/`` URLs were still
  available, fixed.

- The few remaining OAuth 1.0 providers were not compatible with headless mode,
  fixed.

- Depending on where you placed the ``secure_admin_login(admin.site.login)``
  protection you could run into circular import errors, fixed.

Backwards incompatible changes
------------------------------

- SAML: IdP initiated SSO is disabled by default, see security notice below.

Security notice
---------------

- SAML: ``RelayState`` was used to keep track of whether or not the login flow
  was IdP or SP initiated. As ``RelayState`` is a separate field, not part of
  the ``SAMLResponse`` payload, it is not signed and thereby making the SAML
  login flow vulnerable to CSRF/replay attacks. Now, ``InResponseTo`` is used
  instead, addressing the issue for SP initiated SSO flows. IdP initiated SSO
  remains inherently insecure, by design. For that reason, it is now disabled by
  default. If you need to support IdP initiated SSO, you will need to opt-in to
  that by adding ``"reject_idp_initiated_sso": False`` to your advanced SAML
  provider settings.


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/py-django-allauth/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/py-django-allauth/PLIST
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/py-django-allauth/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django-allauth/Makefile
diff -u pkgsrc/www/py-django-allauth/Makefile:1.11 pkgsrc/www/py-django-allauth/Makefile:1.12
--- pkgsrc/www/py-django-allauth/Makefile:1.11  Fri May 24 16:53:14 2024
+++ pkgsrc/www/py-django-allauth/Makefile       Mon Jun 10 07:28:52 2024
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.11 2024/05/24 16:53:14 adam Exp $
+# $NetBSD: Makefile,v 1.12 2024/06/10 07:28:52 adam Exp $
 
-DISTNAME=      django-allauth-0.63.2
-PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
+DISTNAME=      django_allauth-0.63.3
+PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/_/-/}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=d/django-allauth/}
 

Index: pkgsrc/www/py-django-allauth/PLIST
diff -u pkgsrc/www/py-django-allauth/PLIST:1.9 pkgsrc/www/py-django-allauth/PLIST:1.10
--- pkgsrc/www/py-django-allauth/PLIST:1.9      Sat May 18 06:10:53 2024
+++ pkgsrc/www/py-django-allauth/PLIST  Mon Jun 10 07:28:52 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2024/05/18 06:10:53 adam Exp $
+@comment $NetBSD: PLIST,v 1.10 2024/06/10 07:28:52 adam Exp $
 ${PYSITELIB}/${WHEEL_INFODIR}/AUTHORS
 ${PYSITELIB}/${WHEEL_INFODIR}/LICENSE
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
@@ -858,9 +858,6 @@ ${PYSITELIB}/allauth/socialaccount/provi
 ${PYSITELIB}/allauth/socialaccount/providers/base/constants.py
 ${PYSITELIB}/allauth/socialaccount/providers/base/constants.pyc
 ${PYSITELIB}/allauth/socialaccount/providers/base/constants.pyo
-${PYSITELIB}/allauth/socialaccount/providers/base/mixins.py
-${PYSITELIB}/allauth/socialaccount/providers/base/mixins.pyc
-${PYSITELIB}/allauth/socialaccount/providers/base/mixins.pyo
 ${PYSITELIB}/allauth/socialaccount/providers/base/provider.py
 ${PYSITELIB}/allauth/socialaccount/providers/base/provider.pyc
 ${PYSITELIB}/allauth/socialaccount/providers/base/provider.pyo

Index: pkgsrc/www/py-django-allauth/distinfo
diff -u pkgsrc/www/py-django-allauth/distinfo:1.10 pkgsrc/www/py-django-allauth/distinfo:1.11
--- pkgsrc/www/py-django-allauth/distinfo:1.10  Fri May 24 16:53:14 2024
+++ pkgsrc/www/py-django-allauth/distinfo       Mon Jun 10 07:28:52 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.10 2024/05/24 16:53:14 adam Exp $
+$NetBSD: distinfo,v 1.11 2024/06/10 07:28:52 adam Exp $
 
-BLAKE2s (django-allauth-0.63.2.tar.gz) = afa5a209d62bf3c637786085efc60f036a1b232c75b1b3b119e833bd8d45a831
-SHA512 (django-allauth-0.63.2.tar.gz) = 205b05ac53a9fb92b238147f9fa5440cd3020f85f278d6747775c0fdd2a2cf2580a580773172ff2ccdf8ffd1dd6d5ccf81b485b7d0d3faa37ec296076991f79d
-Size (django-allauth-0.63.2.tar.gz) = 1079647 bytes
+BLAKE2s (django_allauth-0.63.3.tar.gz) = 53580416f4a4048691beaee620eda599a2b73d528e1bdace24e607804be50485
+SHA512 (django_allauth-0.63.3.tar.gz) = 5b698b687b683a827c14f8d5eed8c9e1c7847409c5d8382382ce5e0c4eb0ddc01272dd782eb1f55b82ecf7ab10d7ee8f0f8f64d73053d5783aeec50b45fd2227
+Size (django_allauth-0.63.3.tar.gz) = 1082417 bytes