Bump flask-security-too from 5.3.3 to 5.4.3

[dependabot[bot]]

Bumps flask-security-too from 5.3.3 to 5.4.3.

Release notes

Sourced from flask-security-too's releases.

Release 5.4.3

A few small fixes.

Release 5.4.2

Lost API docs - that's not good.

Release 5.4.1

Features and fixes release. As always - consult CHANGES for complete details.

Note: 5.4.0 had some logistics issues - so this is 5.4.1

Changelog

Sourced from flask-security-too's changelog.

Version 5.4.3

Released March 23, 2024

Fixes +++++

• (:issue:950) Regression - some templates no longer getting correct config (thanks pete7863).
• (:issue:954) CSRF not properly ignored for application forms using SECURITY_CSRF_PROTECT_MECHANISMS.
• (:pr:957) Improve jp translations (e-goto)
• (:issue:959) Regression - datetime_factory should still be an attribute (thanks TimotheeJeannin)
• (:issue:942) GENERIC_RESPONSES hide email validation/syntax errors.

Version 5.4.2

Released March 8, 2024

Fixes +++++

• (:issue:946) OpenAPI spec missing.
• (:pr:945) Doc fixes (e-goto)
• (:pr:941) Update ES/IT translations (gissimo)

Version 5.4.0 & 5.4.1

Released February 26, 2024

Among other changes, this continues the process of dis-entangling Flask-Security from Flask-Login and may require some application changes due to backwards incompatible changes.

Features & Improvements +++++++++++++++++++++++

• (:issue:879) Work with Flask[async]. view decorators and signals support async handlers.
• (:pr:900) CI support for python 3.12
• (:pr:901) Work with py_webauthn 2.0 (and only 2.0+)
• (:pr:899) Improve (and simplify) Two-Factor setup. See below for backwards compatability issues and new functionality.
• (:issue:912) Improve oauth debugging support. Handle next propagation in a more general way.
• (:pr:877) Make AnonymousUser (Flask-Login) optional and deprecated.
• (:pr:906) Remove undocumented and untested looking in session for possible 'next' redirect location.
• (:pr:881) No longer rely on Flask-Login.unauthorized callback. See below for implications.
• (:issue:904) Changes to default unauthorized handler - remove use of referrer header (see below) and document precise behavior.
• (:pr:927) The authentication_token format has changed - adding per-token expiry time and future session ID. Old tokens are still accepted.

Docs and Chores +++++++++++++++

... (truncated)

Commits

• 7481d43 Allow email validation errors to be returned even when GENERIC_RESPONSES is s...
• fe1628a Getting ready for 5.4.3
• 140d097 Fix datetime_factory as attribute. (#960)
• 3c9c44d More CSRF fixes. (#958)
• 528d9a6 Update jp translations: remove space between mail and address in japanese wor...
• fcf6acb Fix regression when config no longer set as attributes. (#952)
• 96e8f04 Change release to 5.4.2 - ready to go (#948)
• 0199907 Apidocs (#947)
• 99b19be fixed some grammar (#945)
• 00787ca updated ES and IT translation to v5.4.1 (#941)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #646.