Search results

AuthlibDeprecationWarning emitted when using authlib integration

Status: Open.

Bug

#880 In authlib/authlib;

· robotadam opened on Apr 21, 2026

Authlib 1.7.x imports joserfc at runtime but does not declare it as a required dependency

Status: Open.

Bug

#879 In authlib/authlib;

· johnny-wong opened on Apr 20, 2026

Using Authlib in a Multi-Instance Setup

Status: Open.

Feature

#878 In authlib/authlib;

· JannisZeller opened on Apr 17, 2026

Support Identity Assertion JWT Authorization Grant (ID-JAG)

Status: Open.

Feature

#870 In authlib/authlib;

· Akankshabhasin opened on Mar 9, 2026

Support for oauth state management using signed JWTs

Status: Open.

Feature

#866 In authlib/authlib;

· winwinashwin opened on Mar 1, 2026

Allow custom expiration time for JWT client authentication

role:resource_serverConcerns a resource server implementationConcerns a resource server implementation

spec:rfc7523JWT Profile for OAuth 2.0 Client Authentication and Authorization GrantsJWT Profile for OAuth 2.0 Client Authentication and Authorization Grants

Status: Open.

Feature

#857 In authlib/authlib;

· markhobson opened on Feb 6, 2026

Key management overhaul

role:authorization_serverConcerns a server implementationConcerns a server implementation

Status: Open.

Task

#856 In authlib/authlib;

· azmeuk opened on Jan 27, 2026

·  

Version 1.7

rfc7523.JWTBearerTokenGenerator is obsolete

break change

role:authorization_serverConcerns a server implementationConcerns a server implementation

spec:rfc7523JWT Profile for OAuth 2.0 Client Authentication and Authorization GrantsJWT Profile for OAuth 2.0 Client Authentication and Authorization Grants

spec:rfc9068JSON Web Token (JWT) Profile for OAuth 2.0 Access TokensJSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

Status: Open.

Task

#846 In authlib/authlib;

· azmeuk opened on Dec 18, 2025

length of sqla OAuth2TokenMixin tokens defined as too small

Status: Open.

Bug

#836 In authlib/authlib;

· sistason opened on Oct 24, 2025

RFC9068 JWT access tokens cannot be used at the userinfo endoint

role:authorization_serverConcerns a server implementationConcerns a server implementation

Status: Open.

Bug

#831 In authlib/authlib;

· azmeuk opened on Oct 3, 2025

Allow OAuth session to be reused across requests

integration:httpxcaused by httpxcaused by httpx

integration:requests

Status: Open.

Feature

#822 In authlib/authlib;

· markhobson opened on Sep 11, 2025

·  

Version 1.7

Support for Token Exchange (RFC 8693)?

Status: Open.

Feature

#821 In authlib/authlib;

· maia-iyer opened on Sep 10, 2025