proomt

Search

Search posts, papers, and topics

All posts

Simon Willison1 min readrelease notesintro

datasette-auth-github 1.0

Read on simonwillison.net

Summary

The datasette-auth-github plugin now reaches 1.0, fixing a bug where cookies lacked a Max‑Age attribute and thus expired at session end. The fix ensures longer‑lasting sessions and the release is tested against recent Datasette versions.

  • The plugin authenticates Datasette users via GitHub OAuth.
  • Earlier versions omitted Max-Age on cookies, causing sessions to end with the browser session.
  • Fix adds Max-Age to cookies, making sessions persist across browser restarts.
  • Version 1.0 is now marked stable and tested against Datasette 0.65.x and 1.0ax.

Datasette developers who need GitHub‑based authentication should upgrade to avoid unexpected session expirations.

4/10
securitypythonauthenticationgithubdatasette

Related reading

  1. datasette 1.0a40

    Datasette 1.0a40 adds a background‑task API (datasette.add_background_task()), switches the internal HTTP client to httpx2, and ships a batch of bug fixes aimed at stabilising the upcoming 1.0 release. The security fix mirrors that of 0.65.5.

    Simon Willisonsimonwillison.net1 minrelease

  2. datasette 0.65.5

    Datasette 0.65.5 releases with a security fix: a trailing newline in a table name could bypass permissions and expose private rows (GHSA‑h547‑rmjf‑5m2m).

    Simon Willisonsimonwillison.net1 minrelease

  3. Optimize Your Identity Flows with Auth0 Identity Conversion Suite

    Auth0 announced the early‑access Identity Conversion Suite, which adds two features—Anonymous Sessions (tracking a user before they log in via OAuth‑compatible tokens) and Experiment Center (feature‑flag‑driven A/B testing of auth flows). The post explains the intended use cases (guest checkout, secure anonymous API access, passwordless sign‑up, MFA sizing) but provides no implementation details,…

    Auth0auth0.com7 min

  4. datasette-explain 0.2.2

    datasette-explain 0.2.2 is a minor update for a Datasette plugin that provides SQL query explanation and validation. The primary enhancement is enabling explain plans on read-only stored-query pages.

    Simon Willisonsimonwillison.net1 minrelease

  5. Laravel MCP 1.0 Is Released

    Laravel MCP 1.0 ships with the 2026-07-28 protocol, adding searchable tool catalogs, cache hints, stateless request handling, and PKCE‑required OAuth with client‑metadata support. The release includes migration guidance and new headers for versioned RPC calls.

    Laravellaravel-news.com3 minrelease