From 455778d138ea623d224c9206e5001fd2a1fd7e1c Mon Sep 17 00:00:00 2001
From: Tres Seaver <tseaver@palladion.com>
Date: Tue, 31 May 2016 19:35:57 +0200
Subject: [PATCH] middleware: Avoid passing extracted 'identity' to 'remember' during egress.

---
 CHANGES.rst |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/CHANGES.rst b/CHANGES.rst
index d507b75..9e4b6eb 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -8,6 +8,9 @@
 
 - Drop support for Python 2.6 and 3.2.
 
+- ``middleware``:  avoid passing extracted ``identity`` to ``remember``
+  during egress (the app may have called ``api.forget()``).  See #21.
+
 - ``_auth_tkt`` / ``plugins.auth_tkt``:  add support for any hash algorithm
   supported by the ``hashlib`` module in Python's standard library.
   Fixes #22 via #23.

--
Gitblit v1.9.3