users-package:v4.3.1

v4.3.1 - 2026-02-11

What's Changed

Full Changelog: v4.3.0...v4.3.1

🐛 Bug Fixes

• Timezone-aware datetime usage: Replaced all datetime.now() calls with datetime.now(timezone.utc) to ensure consistency with PostgreSQL's UTC-based NOW() function and prevent timestamp comparison issues across systems
  • Updated users/ratelimiter.py: 8 instances in rate limit calculations and timestamp comparisons
  • Updated users/users.py: Token expiration calculation
  • Updated users/storage.py: Docstring example
  • Updated tests/conftest.py: 20 test fixture timestamps
  • Updated tests/test_rate_limits.py: 3 test assertion timestamps

users-package:v4.3.0

v4.3.0 - 2026-02-11

What's Changed

Full Changelog: v4.2.0...v4.3.0 by @obervinov

🚀 Features

• Rate Limits Refactoring: Decoupled rate limiting from authorization logic
  • Rate limits now work independently without requiring role_id parameter
  • Added elif block in user_access_check() for rate limiting without authorization
  • Maintains backward compatibility: existing code with role_id continues to work
• Storage Bug Fix: Fixed log_user_request() to always insert rate_limits column value
  • Previously skipped rate_limits column when value was None, causing database inconsistencies
  • Now always inserts NULL when rate_limits is None

💥 Breaking Changes

• None - fully backward compatible. Existing implementations with role_id parameter continue to work as before.

🐛 Bug Fixes

• Fixed architectural constraint where rate limits calculation was only performed inside authorization block
• Fixed SQL insertion bug in Storage.log_user_request() when rate_limits=None

users-package:v4.2.0

v4.2.0 - 2025-12-31

What's Changed

Full Changelog: v4.1.3...v4.2.0 by @obervinov in #78

🚀 Features

• Add generic token-based authentication support for frontend integration (web UIs, mobile apps, CLI tools)
  • New methods: issue_token(), validate_token(), revoke_token()
  • PBKDF2 hashing with 100,000 iterations and unique salts
  • Single-use token enforcement and automatic revocation
  • Backward compatible: gracefully handles missing users_tokens table

users-package:v4.1.3

v4.1.3 - 2025-12-24

What's Changed

Full Changelog: v4.1.2...v4.1.3 by @obervinov in #77

🚀 Features

• upgrade dependencies to latest versions

users-package:v4.1.2

v4.1.2 - 2025-07-15

What's Changed

Full Changelog: v4.1.1...v4.1.2 by @obervinov in #63

🚀 Features

• bump dependencies version

users-package:v4.1.1

v4.1.1 - 2025-03-26

What's Changed

Full Changelog: v4.1.0...v4.1.1 by @obervinov in #55

🐛 Bug Fixes

• add rollback transaction action in the Storage class exception handling block to prevent critical exceptions from breaking the database connection

users-package:v4.1.0

v4.1.0 - 2025-02-21

What's Changed

Full Changelog: v4.0.2...v4.1.0 by @obervinov in #54

🚀 Features

• bump dependencies version
• bump workflows version to 2.1.1
• the functionality has been returned to establish its own connection to the database (in addition to the possibility of transferring an existing connection object) for more stable operation of the module with correct credentials via Vault DBEngine (for example, the bug obervinov/pyinstabot-downloader#118)

💥 Breaking Changes

• The vault input argument of the Users() class now expects an object or a new dict format {'instance': <vault_object>, 'role': 'my-dbengine-role'}. The previous vault dictionary format is no longer supported.

users-package:v4.0.2

v4.0.2 - 2024-12-19

What's Changed

Full Changelog: v4.0.1...v4.0.2 by @obervinov in #53

🚀 Features

• Feature request: Add a decorator for easier access verification
• bump workflows version to 2.0.2

🐛 Bug Fixes

• Bug: Denied users are not recorded in the database

users-package:v4.0.1

v4.0.1 - 2024-10-22

What's Changed

Full Changelog: v4.0.0...v4.0.1 by @obervinov in #50

📚 Documentation

• actualized documentation in the README.md file

users-package:v4.0.0

v4.0.0 - 2024-10-22

What's Changed

Full Changelog: v3.0.2...v4.0.0 by @obervinov in #49

💥 Breaking Changes

• bump python version to 3.12
• some arguments of the Users class and the Storage class have been replaced. Detailed information can be found in the DEPRECATED.md file

🚀 Features

• bump all dependencies to the latest versions
• bump workflows version to 2.0.0
• Feature request: Add support for a method that returns a dictionary of all users in the table
• Feature request: Storage should not retrieve the database connection data from the vault itself

🐛 Bug Fixes

• Bug: The application tries to use credentials to access the database that have already expired
• Configuration per_day in RateLimit not working as expected