From 455778d138ea623d224c9206e5001fd2a1fd7e1c Mon Sep 17 00:00:00 2001 From: Tres Seaver <tseaver@palladion.com> Date: Tue, 31 May 2016 19:35:57 +0200 Subject: [PATCH] middleware: Avoid passing extracted 'identity' to 'remember' during egress. --- CHANGES.rst | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/CHANGES.rst b/CHANGES.rst index d507b75..9e4b6eb 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -8,6 +8,9 @@ - Drop support for Python 2.6 and 3.2. +- ``middleware``: avoid passing extracted ``identity`` to ``remember`` + during egress (the app may have called ``api.forget()``). See #21. + - ``_auth_tkt`` / ``plugins.auth_tkt``: add support for any hash algorithm supported by the ``hashlib`` module in Python's standard library. Fixes #22 via #23. -- Gitblit v1.9.3