Unreleased
- Drop support for Python 2.6 and 3.3.
- Optimize how timestamps are serialized and deserialized. (#13)
base64_decode
raisesBadData
when it is passed invalid data. (#27)- Ensure value is bytes when signing to avoid a
TypeError
on Python 3. (#29) - Add a
serializer_kwargs
argument toSerializer
, which is passed todumps
duringdump_payload
. (#36) - More compact JSON dumps for unicode strings. (#38)
- Use the full timestamp rather than an offset, allowing dates before 2011. (#46)
- Detect a
sep
character that may show up in the signature itself and raise aValueError
. (#62) - Use a consistent signature for keyword arguments for
Serializer.load_payload
in subclasses. (#74, #75) - Change default intermediate hash from SHA-1 to SHA-512. (#80)
- Convert JWS exp header to an int when loading. (#99)
Released 2014-03-28
- Added a
BadHeader
exception that is used for bad headers that replaces the oldBadPayload
exception that was reused in those cases.
Released 2013-08-08
- Fixed a packaging mistake that caused the tests and license files to not be included.
Released 2013-07-03
- Added support for
TimedJSONWebSignatureSerializer
. - Made it possible to override the signature verification function to allow implementing asymmetrical algorithms.
Released 2013-05-26
- Fixed an issue on Python 3 which caused invalid errors to be generated.
Released 2013-05-23
- Fixed an incorrect call into
want_bytes
that broke some uses of itsdangerous on Python 2.6.
Released 2013-05-21
- Dropped support for 2.5 and added support for 3.3.
Released 2013-05-03
- Added support for JSON Web Signatures (JWS).
Released 2012-08-10
- Fixed a name error when overriding the digest method.
Released 2012-07-11
- Made it possible to pass unicode values to
load_payload
to make it easier to debug certain things.
Released 2012-07-11
- Made standalone
load_payload
more robust by raising one specific error if something goes wrong. - Refactored exceptions to catch more cases individually, added more attributes.
- Fixed an issue that caused
load_payload
not work in some situations with timestamp based serializers - Added an
loads_unsafe
method.
Released 2012-06-29
- API refactoring to support different key derivations.
- Added attributes to exceptions so that you can inspect the data even if the signature check failed.
Released 2012-06-10
- Small API change that enables customization of the digest module.
Released 2012-02-22
- Fixed a problem with the local timezone being used for the epoch
calculation. This might invalidate some of your signatures if you
were not running in UTC timezone. You can revert to the old behavior
by monkey patching
itsdangerous.EPOCH
.
Released 2011-07-07
- Fixed an uncaught value error.
Released 2011-06-25
- Refactored interface that the underlying serializers can be swapped by passing in a module instead of having to override the payload loaders and dumpers. This makes the interface more compatible with Django's recent changes.