feat: update python-oauthlib to 3.3.1-1

CHANGELOG.rst

@@ -1,6 +1,36 @@
 Changelog
 =========
 
+3.3.1 (2025-06-19):
+------------------
+OAuth2.0 Client:
+* #906: fix regression of expires_in parsing when float in string.
+
+
+3.3.0 (2025-06-17):
+------------------
+OAuth2.0 Provider:
+* OIDC: #879 Changed in how ui_locales is parsed
+* RFC8628: Added OAuth2.0 Device Authorization Grant support
+* PKCE: #876, #893 Fixed `create_code_verifier` length
+* OIDC: Pre-configured OIDC server to use Refresh Token by default
+
+OAuth2.0 Common:
+* OAuth2Error: Allow 0 to be a valid state
+
+OAuth2.0 Client:
+* #745: expires_at is forced to be an int
+* #899: expires_at clarification
+
+General:
+* Removed Python 3.5, 3.6, 3.7 support
+* #859, #883: Added Python 3.12, 3.13 Support
+* Added dependency-review GitHub Action
+* Updated various references of license (SPDX identifier..)
+* Added GitHub Action for lint, replaced bandy with ruff, removed isort...
+* Migrated to GitHub Actions from Travis
+* Added Security Policy
+
 3.2.2 (2022-10-17)
 ------------------
 OAuth2.0 Provider:

LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2019 The OAuthlib Community
+Copyright (c) The OAuthlib Community
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without
@@ -11,14 +11,14 @@ modification, are permitted provided that the following conditions are met:
        notice, this list of conditions and the following disclaimer in the
        documentation and/or other materials provided with the distribution.
 
-    3. Neither the name of this project nor the names of its contributors may
-       be used to endorse or promote products derived from this software without
-       specific prior written permission.
+    3. Neither the name of the copyright holder nor the names of its
+       contributors may be used to endorse or promote products derived from this
+       software without specific prior written permission.
 
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER

PKG-INFO

@@ -1,50 +1,65 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: oauthlib
-Version: 3.2.2
+Version: 3.3.1
 Summary: A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
 Home-page: https://github.com/oauthlib/oauthlib
 Author: The OAuthlib Community
-Author-email: [email protected]
-Maintainer: Ib Lundgren
-Maintainer-email: [email protected]
-License: BSD
+Maintainer: Jonathan Huot
+Maintainer-email: [email protected]
+License: BSD-3-Clause
 Platform: any
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Web Environment
 Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved
-Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: MacOS
 Classifier: Operating System :: POSIX
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.6
-Classifier: Programming Language :: Python :: 3.7
 Classifier: Programming Language :: Python :: 3.8
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Programming Language :: Python :: Implementation
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: Implementation :: PyPy
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
-Requires-Python: >=3.6
+Requires-Python: >=3.8
 Description-Content-Type: text/x-rst
+License-File: LICENSE
 Provides-Extra: rsa
+Requires-Dist: cryptography>=3.0.0; extra == "rsa"
 Provides-Extra: signedtoken
+Requires-Dist: cryptography>=3.0.0; extra == "signedtoken"
+Requires-Dist: pyjwt<3,>=2.0.0; extra == "signedtoken"
 Provides-Extra: signals
-License-File: LICENSE
+Requires-Dist: blinker>=1.4.0; extra == "signals"
+Dynamic: author
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: license
+Dynamic: license-file
+Dynamic: maintainer
+Dynamic: maintainer-email
+Dynamic: platform
+Dynamic: provides-extra
+Dynamic: requires-python
+Dynamic: summary
 
 OAuthLib - Python Framework for OAuth1 & OAuth2
 ===============================================
 
 *A generic, spec-compliant, thorough implementation of the OAuth request-signing
-logic for Python 3.6+.*
+logic for Python 3.8+*
 
-.. image:: https://app.travis-ci.com/oauthlib/oauthlib.svg?branch=master
-  :target: https://app.travis-ci.com/oauthlib/oauthlib
-  :alt: Travis
+.. image:: https://github.com/oauthlib/oauthlib/actions/workflows/python-build.yml/badge.svg
+  :target: https://github.com/oauthlib/oauthlib/actions
+  :alt: GitHub Actions
 .. image:: https://coveralls.io/repos/oauthlib/oauthlib/badge.svg?branch=master
   :target: https://coveralls.io/r/oauthlib/oauthlib
   :alt: Coveralls
@@ -113,7 +128,9 @@ Which web frameworks are supported?
 
 The following packages provide OAuth support using OAuthLib.
 
-- For Django there is `django-oauth-toolkit`_, which includes `Django REST framework`_ support.
+- For Django there is:
+  - `django-oauth-toolkit`_, which includes `Django REST framework`_ support.
+  - `django-allauth`_, which includes `Django REST framework`_ as well as `Django Ninja`_ support.
 - For Flask there is `flask-oauthlib`_ and `Flask-Dance`_.
 - For Pyramid there is `pyramid-oauthlib`_.
 - For Bottle there is `bottle-oauthlib`_.
@@ -127,6 +144,8 @@ please open a Pull Request, updating the documentation.
 .. _`Flask-Dance`: https://github.com/singingwolfboy/flask-dance
 .. _`pyramid-oauthlib`: https://github.com/tilgovi/pyramid-oauthlib
 .. _`bottle-oauthlib`: https://github.com/thomsonreuters/bottle-oauthlib
+.. _`django-allauth`: https://allauth.org/
+.. _`Django Ninja`: https://django-ninja.dev/
 
 Using OAuthLib? Please get in touch!
 ------------------------------------
@@ -148,7 +167,7 @@ have the pleasure to run into each other, please send a docs pull request =)
 License
 -------
 
-OAuthLib is yours to use and abuse according to the terms of the BSD license.
+OAuthLib is yours to use and abuse according to the terms of the BSD-3-Clause license.
 Check the LICENSE file for full details.
 
 Credits

README.rst

@@ -2,11 +2,11 @@ OAuthLib - Python Framework for OAuth1 & OAuth2
 ===============================================
 
 *A generic, spec-compliant, thorough implementation of the OAuth request-signing
-logic for Python 3.6+.*
+logic for Python 3.8+*
 
-.. image:: https://app.travis-ci.com/oauthlib/oauthlib.svg?branch=master
-  :target: https://app.travis-ci.com/oauthlib/oauthlib
-  :alt: Travis
+.. image:: https://github.com/oauthlib/oauthlib/actions/workflows/python-build.yml/badge.svg
+  :target: https://github.com/oauthlib/oauthlib/actions
+  :alt: GitHub Actions
 .. image:: https://coveralls.io/repos/oauthlib/oauthlib/badge.svg?branch=master
   :target: https://coveralls.io/r/oauthlib/oauthlib
   :alt: Coveralls
@@ -75,7 +75,9 @@ Which web frameworks are supported?
 
 The following packages provide OAuth support using OAuthLib.
 
-- For Django there is `django-oauth-toolkit`_, which includes `Django REST framework`_ support.
+- For Django there is:
+  - `django-oauth-toolkit`_, which includes `Django REST framework`_ support.
+  - `django-allauth`_, which includes `Django REST framework`_ as well as `Django Ninja`_ support.
 - For Flask there is `flask-oauthlib`_ and `Flask-Dance`_.
 - For Pyramid there is `pyramid-oauthlib`_.
 - For Bottle there is `bottle-oauthlib`_.
@@ -89,6 +91,8 @@ please open a Pull Request, updating the documentation.
 .. _`Flask-Dance`: https://github.com/singingwolfboy/flask-dance
 .. _`pyramid-oauthlib`: https://github.com/tilgovi/pyramid-oauthlib
 .. _`bottle-oauthlib`: https://github.com/thomsonreuters/bottle-oauthlib
+.. _`django-allauth`: https://allauth.org/
+.. _`Django Ninja`: https://django-ninja.dev/
 
 Using OAuthLib? Please get in touch!
 ------------------------------------
@@ -110,7 +114,7 @@ have the pleasure to run into each other, please send a docs pull request =)
 License
 -------
 
-OAuthLib is yours to use and abuse according to the terms of the BSD license.
+OAuthLib is yours to use and abuse according to the terms of the BSD-3-Clause license.
 Check the LICENSE file for full details.
 
 Credits

debian/.gitignore

@@ -0,0 +1 @@
+/files

debian/changelog

@@ -1,3 +1,36 @@
+python-oauthlib (3.3.1-1) unstable; urgency=medium
+
+  * Team upload.
+  * New upstream release.
+
+ -- Colin Watson <[email protected]>  Mon, 25 Aug 2025 23:32:36 +0100
+
+python-oauthlib (3.2.2-4) unstable; urgency=medium
+
+  * Team upload.
+  * Drop dependency on old python3-exceptiongroup
+
+ -- Alexandre Detiste <[email protected]>  Sat, 26 Jul 2025 02:18:32 +0200
+
+python-oauthlib (3.2.2-3) unstable; urgency=medium
+
+  * Team upload.
+  * d/rules: Ignore one test from test suite
+  * autopkgtest: Use a better usable shell script
+  * d/control: Bump Standards-Version to 4.7.0
+  * d/control: Use dh-sequence-python3,pybuild-plugin-pyproject
+  * d/rules: Dropp --with option in default target
+
+ -- Carsten Schoenert <[email protected]>  Mon, 06 Jan 2025 17:13:43 +0200
+
+python-oauthlib (3.2.2-2) unstable; urgency=medium
+
+  * Team upload.
+  * Make UtilsTests.test_filter_params Python 3.13+ compatible (closes:
+    #1082235).
+
+ -- Colin Watson <[email protected]>  Wed, 09 Oct 2024 12:39:58 +0100
+
 python-oauthlib (3.2.2-1) unstable; urgency=medium
 
   * New upstream version 3.2.2

debian/control

@@ -5,15 +5,15 @@ Section: python
 Priority: optional
 Build-Depends:
  debhelper-compat (= 13),
- dh-python,
+ dh-sequence-python3,
+ pybuild-plugin-pyproject,
  python3-all,
  python3-blinker,
  python3-cryptography,
- python3-exceptiongroup,
  python3-jwt,
- python3-pytest (>= 4.0),
+ python3-pytest (>= 8.0),
  python3-setuptools
-Standards-Version: 4.6.1
+Standards-Version: 4.7.2
 Rules-Requires-Root: no
 Homepage: https://github.com/idan/oauthlib
 Vcs-Git: https://salsa.debian.org/python-team/packages/python-oauthlib.git

debian/rules

@@ -1,8 +1,11 @@
 #!/usr/bin/make -f
+# -*- makefile -*-
 
-export PYBUILD_NAME=oauthlib
+#export DH_VERBOSE = 1
 
+export PYBUILD_NAME=oauthlib
+export export PYBUILD_TEST_ARGS=-k 'not test_rsa_bad_keys'
 export PYTHONWARNINGS=d
 
 %:
-	dh $@ --with python3 --buildsystem=pybuild
+	dh $@ --buildsystem=pybuild

debian/tests/control

@@ -1,6 +1,5 @@
 Tests: python3-oauthlib
 Depends:
  python3-all,
- python3-exceptiongroup,
  python3-oauthlib,
- python3-pytest (>= 4.0),
+ python3-pytest (>= 8.0),

debian/tests/python3-oauthlib

@@ -1,6 +1,20 @@
-#!/bin/sh -e
+#!/bin/sh
+set -efu
 
-cp -r tests "$AUTOPKGTEST_TMP"
-cd "$AUTOPKGTEST_TMP"
+cp -a tests ${AUTOPKGTEST_TMP}
 
-py3versions -s | tr ' ' '\n' | xargs -I {} env {} -Wd -m pytest -v -x -rs 2>&1
+for py3vers in $(py3versions -s); do
+    echo
+    echo "***************************"
+    echo "*** Testing with ${py3vers}"
+    echo "***************************"
+    echo
+    cd ${AUTOPKGTEST_TMP} && \
+        echo "Content of current working folder:\n" && \
+        ls -la && \
+        echo "Running tests...\n" && \
+        PYTHONPATH=. ${py3vers} -m pytest -k 'not test_rsa_bad_keys' tests && \
+        rm -rf .pytest_cache || exit 1
+done
+
+exit 0