From 3ad70291149a0a3e1018463cefefac07bf8c969e Mon Sep 17 00:00:00 2001 From: Mateusz Sikora Date: Tue, 27 Jan 2015 17:13:47 +0100 Subject: [PATCH] version 0.3.4 --- demo/requirements.pip | 2 +- docs/changelog.rst | 5 +++++ docs/index.rst | 2 +- setup.py | 2 +- 4 files changed, 8 insertions(+), 3 deletions(-) diff --git a/demo/requirements.pip b/demo/requirements.pip index 77ce9b1..a750904 100644 --- a/demo/requirements.pip +++ b/demo/requirements.pip @@ -1,4 +1,4 @@ django==1.7.3 -django-rest-auth==0.3.3 +django-rest-auth==0.3.4 django-allauth==0.19.0 six==1.9.0 diff --git a/docs/changelog.rst b/docs/changelog.rst index 77c2e2e..3f9b901 100644 --- a/docs/changelog.rst +++ b/docs/changelog.rst @@ -1,6 +1,11 @@ Changelog ========= +0.3.4 +----- +- fixed bug in PasswordResetConfirmation serializer (token field wasn't validated) +- fixed bug in Register view + 0.3.3 ----- diff --git a/docs/index.rst b/docs/index.rst index f0608a7..2ad4a05 100644 --- a/docs/index.rst +++ b/docs/index.rst @@ -6,7 +6,7 @@ Welcome to django-rest-auth's documentation! ============================================ -.. warning:: Version 0.3.0 is not compatible with any of previous versions, see :doc:`Changelog ` section for a list of changes. +.. warning:: Updating django-rest-auth to version **0.3.4** is highly recommended because of a security issue in PasswordResetConfirmation validation method. .. note:: django-rest-auth from v0.3.3 supports django-rest-framework v3.0 diff --git a/setup.py b/setup.py index 490d699..c4cb28b 100644 --- a/setup.py +++ b/setup.py @@ -18,7 +18,7 @@ f.close() setup( name='django-rest-auth', - version='0.3.3', + version='0.3.4', author='Sumit Chachra', author_email='chachra@tivix.com', url='http://github.com/Tivix/django-rest-auth',