5.6.0

Changed

• Fixed possibly unsafe account association (CVE-2025-61783)
• Storage now filters for active users

Added

• Django 6.0 and Python 3.14 compatibility
• Type annotations
• LoginRequiredMiddleware compatibility
• RAISE_EXCEPTIONS and LOGIN_ERROR_URL can be configured per backend

Release 5.5.1

Changed

• Fixed authentication with OpenID based services

Donations

This project welcomes donations to make the development sustainable, you can fund Python Social Auth on the following platforms:

• GitHub Sponsors
• Open Collective

Release 5.5.0

Changed

• Dropped support for older Django versions.
• Added non-empty constraint on uid.
• Added support for session restore with stricter SameSite cookie policy.

Donations

This project welcomes donations to make the development sustainable, you can fund Python Social Auth on the following platforms:

• GitHub Sponsors
• Open Collective

Release 5.4.3

What's Changed

• deps: Update supported Python versions by @a-grealish in #621
• Fixed rollback of extra_data migration by @niklas-scholz in #626
• Modernize the build by @offbyone in #641
• fix(ci): test django main only on Python 3.12+ by @nijel in #647
• chore: test against Django 5.1 and 5.2 by @nijel in #656
• chore: remove requirements files by @nijel in #657
• chore: update tox envlist by @nijel in #658
• chore: Version bump 5.4.3 by @nijel in #659

New Contributors

• @a-grealish made their first contribution in #621
• @niklas-scholz made their first contribution in #626
• @offbyone made their first contribution in #641
• @renovate made their first contribution in #644

Full Changelog: 5.4.2...5.4.3

Release 5.4.2

What's Changed

• Fixed UserSocialAuth creation by allowing JSONField to be blank
• Fixed the assumption that UID can only be an integer (#571)

New Contributors

• @i-zhivetiev made their first contribution in #572
• @arjunadeltoso made their first contribution in #580

Full Changelog: 5.4.1...5.4.2

Release 5.4.1

Changed

• Added reverse migration for JSON field
• Fixed improper handling of case sensitivity with MySQL/MariaDB (CVE-2024-32879)

Release 5.4.0

Changed

• Improved JSON field migration performance
• Introduce configuration to request POST only requests for social authentication
• Updated list of supported Django and Python versions

Release 5.3.0

• Uses Django native JSON field

Release 5.2.0

Changed

• Removed support for Django<3.2
• Fixed missing migration issue

Release 5.1.0

Changed

• Compatibility with recent Django and Python versions
• Coding style improvements
• Improved error handling in SocialAuthExceptionMiddleware