invenio-accounts 1.0.2

Invenio user management and authentication.

Invenio user management and authentication.

Features:

• User and role management.

• User registration, password reset/recovery and email verification.

• Administration interface and CLI for managing users.

• Session based authentication with session theft protection as well as “remember me” support.

• Strong cryptographic password hashing with support for migrating password hashes (including Invenio v1.x) to new stronger algorithms.

• Session activity tracking allowing users to e.g. logout of all devices.

• Server-side session management.

• JSON Web Token encoding and decoding support useful for e.g. CSRF-protection in REST APIs.

Invenio-Accounts relies on the following community packages to do all the heavy-lifting:

• Flask-Security

• Flask-Login

• Flask-Principal

• Flask-KVSession

• Passlib

Further documentation is available on https://invenio-accounts.readthedocs.io/

Changes

Version 1.0.2 (released 2018-10-31)

• added AnonymousIdentity loader to app initialisation, fixes the any-user need functionality of invenio-access

Version 1.0.1 (released 2018-05-25)

• Bumped Flask-CeleryExt from v0.3.0 to v0.3.1 to fix issue with Celery version string not being parsable and thus causing problems with installing Celery.

Version 1.0.0 (released 2018-03-23)

• Initial public release.