Created attachment 232402 [details] Patch for Makefile / distinfo Hi, Attached is a patch to update security/py-flask-httpauth to the latest (4.5.0) version So it will be possible to use the current_user method with Token Authentication (https://flask-httpauth.readthedocs.io/en/latest/) I don’t think www/onionshare will be impacted, and I don’t spot deprecations in https://github.com/miguelgrinberg/Flask-HTTPAuth/blob/main/CHANGES.md Also, it looks like the latest version of onionshare dropped this flask extension all together. Best Regards
The update will also fix a regression introduced by 2.1.0+ due to the removal of safe_str_cmp in www/py-flask … File "/usr/local/lib/python3.8/site-packages/flask_httpauth.py", line 16, in <module> from werkzeug.security import safe_str_cmp ImportError: cannot import name 'safe_str_cmp' from 'werkzeug.security' (/usr/local/lib/python3.8/site-packages/werkzeug/security.py) …
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=389aa8a1e82c60689f1130feccac43da346c5da7 commit 389aa8a1e82c60689f1130feccac43da346c5da7 Author: Ruslan Makhmatkhanov <rm@FreeBSD.org> AuthorDate: 2022-07-22 10:11:47 +0000 Commit: Ruslan Makhmatkhanov <rm@FreeBSD.org> CommitDate: 2022-07-22 10:11:47 +0000 security/py-flask-httpauth: update to 4.7.0 Changes: https://github.com/miguelgrinberg/Flask-HTTPAuth/blob/main/CHANGES.md PR: 262503 Reported by: ruben@verweg.com security/py-flask-httpauth/Makefile | 2 +- security/py-flask-httpauth/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-)
Update to latest 4.7.0. Thank you!
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=d0aab7f46df1ee2494ac09858fd903330f785d43 commit d0aab7f46df1ee2494ac09858fd903330f785d43 Author: Vinícius Zavam <egypcio@FreeBSD.org> AuthorDate: 2022-08-07 15:17:20 +0000 Commit: Vinícius Zavam <egypcio@FreeBSD.org> CommitDate: 2022-08-07 15:24:17 +0000 www/onionshare: fix DEPRECATED deps, and update pluggable transports * fix DEPRECATED flag, by using a more reliable Python module; * used pycryptodome instead of cryptography to keep compatibility; * update pluggable transports support by adding snowflake. PR: 260897, 262503, 265390 Reported by: yuri@, ruben <ruben % verweg.com>, chris <chris % crvintel.com> Sponsored by: TorBSD Diversity Project, TDP Sponsored by: The Tor Project www/onionshare/Makefile | 17 ++++++++--------- www/onionshare/distinfo | 6 +++--- 2 files changed, 11 insertions(+), 12 deletions(-)