social-auth-app-django
Python Social Authentication, Django integration.
Description
# Python Social Auth - Django Python Social Auth is an easy to setup social authentication/registration mechanism with support for several frameworks and auth providers. ## Description This is the [Django](https://www.djangoproject.com/) component of the [python-social-auth ecosystem](https://github.com/python-social-auth/social-core), it implements the needed functionality to integrate [social-auth-core](https://github.com/python-social-auth/social-core) in a Django based project. ## Django version This project will focus on the currently supported Django releases as stated on the [Django Project Supported Versions table](https://www.djangoproject.com/download/#supported-versions). Backward compatibility with unsupported versions won't be enforced. ## Documentation Project documentation is available at https://python-social-auth.readthedocs.io/. ## Setup ```shell $ pip install social-auth-app-django ``` ## Contributing Contributions are welcome! Only the core and Django modules are currently in development. All others are in maintenance only mode, and maintainers are especially welcome there. See the [CONTRIBUTING.md](https://github.com/python-social-auth/.github/blob/main/CONTRIBUTING.md) document for details. ## Versioning This project follows [Semantic Versioning 2.0.0](https://semver.org/spec/v2.0.0.html). ## License This project follows the BSD license. See the [LICENSE](LICENSE) for details. ## Donations This project welcomes donations to make the development sustainable, you can fund Python Social Auth on following platforms: - [GitHub Sponsors](https://github.com/sponsors/python-social-auth/) - [Open Collective](https://opencollective.com/python-social-auth)
Release History
| Version | Changes | Urgency | Date |
|---|---|---|---|
| 6.0.1 | ### Fixed - Created sessions before authentication so cross-site SAML POST callbacks can restore authentication request IDs. | High | 7/24/2026 |
| 6.0.0 | ### Security - Added the default Django confirmation page for externally resumed partial pipelines. ### Changed - Raised the `social-auth-core` dependency to the next major release with the required Strategy hooks. - Login views now always require POST requests and the `SOCIAL_AUTH_REQUIRE_POST` setting was removed. | High | 6/23/2026 |
| 5.9.0 | ### Changed - Added async support to `SocialAuthExceptionMiddleware` - Dropped support for Django 5.1, Django 5.2 is now the minimum supported version - Loosened the `social-auth-core` dependency to allow compatible 4.x releases - Improved release automation and GitHub release asset publishing | High | 4/29/2026 |
| 5.8.0 | Imported from PyPI (5.8.0) | Low | 4/21/2026 |
| 5.7.0 | ### Changed - Integrated with `social_core` using registry instead of monkey patching it ### Donations This project welcomes donations to make the development sustainable. The following platforms are available for funding Python Social Auth: - [GitHub Sponsors](https://github.com/sponsors/python-social-auth/) - [Open Collective](https://opencollective.com/python-social-auth) | Low | 12/18/2025 |
| 5.6.0 | ### Changed - Fixed possibly unsafe account association ([CVE-2025-61783](https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-wv4w-6qv2-qqfg)) - Storage now filters for active users, you might need to customize `SOCIAL_AUTH_ACTIVE_USERS_FILTER` if your custom model does not have the `is_active` field ### Added - Django 6.0 and Python 3.14 compatibility - Type annotations - LoginRequiredMiddleware compatibility - `RAISE_EXCEPTIONS` and `LOGIN_ERROR_URL` c | Low | 10/9/2025 |
| 5.5.1 | ### Changed - Fixed authentication with OpenID based services ### Donations This project welcomes donations to make the development sustainable, you can fund Python Social Auth on the following platforms: - [GitHub Sponsors](https://github.com/sponsors/python-social-auth/) - [Open Collective](https://opencollective.com/python-social-auth) | Low | 6/27/2025 |
| 5.5.0 | ### Changed - Dropped support for older Django versions. - Added non-empty constraint on `uid`. - Added support for session restore with stricter SameSite cookie policy. ### Donations This project welcomes donations to make the development sustainable, you can fund Python Social Auth on the following platforms: - [GitHub Sponsors](https://github.com/sponsors/python-social-auth/) - [Open Collective](https://opencollective.com/python-social-auth) | Low | 6/27/2025 |
| 5.4.3 | ## What's Changed * deps: Update supported Python versions by @a-grealish in https://github.com/python-social-auth/social-app-django/pull/621 * Fixed rollback of extra_data migration by @niklas-scholz in https://github.com/python-social-auth/social-app-django/pull/626 * Modernize the build by @offbyone in https://github.com/python-social-auth/social-app-django/pull/641 * fix(ci): test django main only on Python 3.12+ by @nijel in https://github.com/python-social-auth/social-app-django/pull/6 | Low | 2/13/2025 |
| 5.4.2 | ## What's Changed - Fixed `UserSocialAuth` creation by allowing `JSONField` to be blank - Fixed the assumption that UID can only be an integer (#571) ## New Contributors * @i-zhivetiev made their first contribution in https://github.com/python-social-auth/social-app-django/pull/572 * @arjunadeltoso made their first contribution in https://github.com/python-social-auth/social-app-django/pull/580 **Full Changelog**: https://github.com/python-social-auth/social-app-django/compare/5.4.1... | Low | 7/12/2024 |
| 5.4.1 | ### Changed - Added reverse migration for JSON field - Fixed improper handling of case sensitivity with MySQL/MariaDB ([CVE-2024-32879](https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-2gr8-3wc7-xhj3)) | Low | 4/24/2024 |
| 5.4.0 | ### Changed - Improved JSON field migration performance - Introduce configuration to request POST only requests for social authentication - Updated list of supported Django and Python versions | Low | 10/17/2023 |
| 5.3.0 | * Uses Django native JSON field | Low | 9/1/2023 |
| 5.2.0 | ### Changed - Removed support for Django<3.2 - Fixed missing migration issue | Low | 3/31/2023 |
| 5.1.0 | ### Changed - Compatibility with recent Django and Python versions - Coding style improvements - Improved error handling in SocialAuthExceptionMiddleware | Low | 3/15/2023 |
| 5.0.0 | Changes: - Removed compat shims for obsolete Django versions - Switch from deprecated `django.conf.urls.url` to `django.urls.path` - Use query `.exists()` instead of `.count() > 0` - Added testing for Django 3.0 - Drop support for Python 2 - Django generic `JSONField` support, details documented [here](https://python-social-auth.readthedocs.io/en/latest/configuration/django.html#json-field-support) - Django 3.2+ compatibility - Use `_default_manager` instead of `objects` | Low | 8/5/2021 |