atexio / mercure

Mercure is a tool for security managers who want to train their colleague to phishing.
https://hub.docker.com/r/atexio/mercure/
GNU General Public License v3.0
267 stars 56 forks source link

Update django-axes to 5.0.4 #262

Closed pyup-bot closed 5 years ago

pyup-bot commented 5 years ago

This PR updates django-axes from 4.5.4 to 5.0.4.

Changelog ### 5.0.4 ``` ------------------ - Fix regression with OAuth2 authentication backends not having remote IP addresses set and throwing an exception in cache key calculation. ``` ### 5.0.3 ``` ------------------ - Fix ``django.contrib.auth`` module ``login`` and ``logout`` functionality so that they work with the handlers without the an ``AxesHttpRequest`` to improve cross compatibility with other Django applications. [aleksihakli] - Change IP address resolution to allow empty or missing addresses. [aleksihakli] - Add error logging for missing request attributes in the handler layer so that users get better indicators of misconfigured applications. [aleksihakli] ``` ### 5.0.2 ``` ------------------ - Add ``AXES_ENABLED`` setting for disabling Axes with e.g. tests that use Django test client ``login``, ``logout``, and ``force_login`` methods, which do not supply the ``request`` argument to views, preventing Axes from functioning correctly in certain test setups. [aleksihakli] ``` ### 5.0.1 ``` ------------------ - Add changelog to documentation. [aleksihakli] ``` ### 5.0 ``` ---------------- - Deprecate Python 2.7, 3.4 and 3.5 support. [aleksihakli] - Remove automatic decoration and monkey-patching of Django views and forms. Decorators are available for login function and method decoration as before. [aleksihakli] - Use backend, middleware, and signal handlers for tracking login attempts and implementing user lockouts. [aleksihakli, jorlugaqui, joshua-s] - Add ``AxesDatabaseHandler``, ``AxesCacheHandler``, and ``AxesDummyHandler`` handler backends for processing user login and logout events and failures. Handlers are configurable with the ``AXES_HANDLER`` setting. [aleksihakli, jorlugaqui, joshua-s] - Improve management commands and separate commands for resetting all access attempts, attempts by IP, and attempts by username. New command names are ``axes_reset``, ``axes_reset_ip`` and ``axes_reset_username``. [aleksihakli] - Add support for string import for ``AXES_USERNAME_CALLABLE`` that supports dotted paths in addition to the old callable type such as a function or a class method. [aleksihakli] - Deprecate one argument call signature for ``AXES_USERNAME_CALLABLE``. From now on, the callable needs to accept two arguments, the HttpRequest and credentials that are supplied to the Django ``authenticate`` method in authentication backends. [aleksihakli] - Improve documentation layouting and contents. Add public API reference section. [aleksihakli] ```
Links - PyPI: https://pypi.org/project/django-axes - Changelog: https://pyup.io/changelogs/django-axes/ - Repo: https://github.com/jazzband/django-axes
y0no commented 5 years ago

Already covered by #265