0.13.1

• Deployments that are configured to check organization membership now use read:org scope instead of the more permissive user scope. #73

0.13

This plugin now builds on the Authentication and permissions mechanism introduced in Datasette 0.44. This means it can be used in combination with other authentication plugins such as datasette-auth-tokens. #62

When a user signs in with GitHub, a signed ds_actor cookie is set with details of their GitHub profile. Fields from this dictionary can be used with Datasette allow blocks to control access to individual databases, tables and queries.

The new load_orgs and load_teams options can be used to check the user's membership of different organization and teams when they first sign in. These memberships will be encoded in the cookie and can be used to control access.

Other changes:

• The ASGI middleware version of this plugin has been split off into a separate asgi-auth-github package. #63
• Error messages are now rendered using a datasette_auth_github_error.html template, which can be customized by including a template of the same name in a custom templates directory. #36
• The /-/auth-callback path is now /-/github-auth-callback - you will need to update this in your GitHub OAuth application settings. #66

0.13a2

• Renamed /-/auth-callback to /-/github-auth-callback. #66

0.13a1

• Removed custom base template - Datasette provides a "logout" link in the default interface now.
• Added "Sign in with GitHub" menu action. #65
• Use datasette_datasette_auth_github_error.html template for error messages. #36

0.13a0

Alpha release. This is a big change - it switches the plugin over to using the authentication plugin mechanism introduced in Datasette 0.44.

0.12

• Respects scope["auth"] if it has already been populated by another authentication plugin - #59
• Fixed bug where require_auth setting was not respected - thanks, Harrison Tsai! - #57

0.11.1

• Fix for bug interacting with other plugins such as datasette-search-all - #58

0.11

• Subclasses can now customize the creation of the redirect cookie - #49 - thanks, @ananis25

0.10

• New cacheable_prefixes mechanism to avoid performance issues caused by adding cache-control: private to static assets - #47

0.9.1

• Updated documentation to reflect new one hour cookie_ttl default - #43