Skip to content

chore(deps): bump auth0-server-python from 1.0.0b14 to 1.0.0b16 - #164

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/auth0-server-python-1.0.0b16
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/auth0-server-python-1.0.0b16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps auth0-server-python from 1.0.0b14 to 1.0.0b16.

Release notes

Sourced from auth0-server-python's releases.

1.0.0b16

Added

  • feat: add mTLS (RFC 8705) client authentication - new use_mtls and ssl_context params let ServerClient present a TLS client certificate at the token endpoint instead of sending a client secret #159 (cschetan77)

1.0.0b15

⚠️ Breaking Changes

  • feat!: add Private Key JWT (private_key_jwt) client authentication - clients with neither a client_secret nor a client_assertion_signing_key now raise ConfigurationError instead of proceeding as a public client. PAR requests now set response_type=code #154 (kishore7snehil)

Added

  • feat: passwordless support - adds ServerClient.passwordless for Email OTP, SMS OTP, and Email Magic Link embedded flows #153 (rmad17)
  • feat: Private JWT CA support for passwordless - extends passwordless start and verify to use _apply_client_authentication so private_key_jwt is supported #158 (rmad17)

Fixed

  • fix: reject blank organization before actor resolution in session transfer token request #150 (kishore7snehil)

Changed

  • docs: add Step-up authentication example #161 (kailash-b)
  • docs: fix documentation drift in README and examples #144 (rmad17)
Changelog

Sourced from auth0-server-python's changelog.

1.0.0b16 (2026-09-10)

Full Changelog

Added

  • feat: add mTLS (RFC 8705) client authentication - new use_mtls and ssl_context params let ServerClient present a TLS client certificate at the token endpoint instead of sending a client secret #159 (cschetan77)

1.0.0b15 (2026-09-07)

Full Changelog

⚠️ Breaking Changes

  • feat!: add Private Key JWT (private_key_jwt) client authentication - clients with neither a client_secret nor a client_assertion_signing_key now raise ConfigurationError instead of proceeding as a public client. PAR requests now set response_type=code #154 (kishore7snehil)

Added

  • feat: passwordless support - adds ServerClient.passwordless for Email OTP, SMS OTP, and Email Magic Link embedded flows #153 (rmad17)
  • feat: Private JWT CA support for passwordless - extends passwordless start and verify to use _apply_client_authentication so private_key_jwt is supported #158 (rmad17)

Fixed

  • fix: reject blank organization before actor resolution in session transfer token request #150 (kishore7snehil)

Changed

  • docs: add Step-up authentication example #161 (kailash-b)
  • docs: fix documentation drift in README and examples #144 (rmad17)
Commits
  • 220a123 Merge pull request #170 from auth0/release/1.0.0b16
  • 825af6f chore: release 1.0.0b16
  • dd55bf5 Merge pull request #159 from auth0/feat/mtls-client-authentication
  • eccff25 docs: fix passkeys section and remove what-comment in server_client
  • b6e5096 style: fix semicolon clause-splice in passwordless verify error message
  • 37dba93 refactor: remove redundant algorithms arg from unverified jwt.decode call
  • 3035b66 style: fix repo convention violations flagged in PR review
  • 8b05915 test: add body credential assertions and authlib constructor verification for...
  • d0a38f2 test: add mTLS routing, credential, and ssl_context assertions for passwordle...
  • 05a26c6 docs: fix stale token_endpoint_override reference in flow-map
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [auth0-server-python](https://github.com/auth0/auth0-server-python) from 1.0.0b14 to 1.0.0b16.
- [Release notes](https://github.com/auth0/auth0-server-python/releases)
- [Changelog](https://github.com/auth0/auth0-server-python/blob/main/CHANGELOG.md)
- [Commits](auth0/auth0-server-python@1.0.0b14...1.0.0b16)

---
updated-dependencies:
- dependency-name: auth0-server-python
  dependency-version: 1.0.0b16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 14, 2026 16:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #167.

@dependabot dependabot Bot closed this Sep 21, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/auth0-server-python-1.0.0b16 branch September 21, 2026 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants