4.1.1

What's Changed

• Abort if user/pass auth success but no MFA by @markstuart in #72

Full Changelog: 4.1.0...4.1.1

4.1.0

What's Changed

• Disable totp authentication, if needed by @RabiaSajjad in #52

Full Changelog: 4.0.0...4.1.0

4.0.0

What's Changed

• resources with no url/file are safe by @wardi in #62
• Validate Upload Type Flask Fix by @JVickery-TBS in #64
• Ckan 2.10 support by @markstuart in #65

Breaking Changes

• CKAN versions before 2.9.x are no longer supported

New Contributors

• @JVickery-TBS made their first contribution in #64

Full Changelog: v3.0.4...4.0.0

Upgrade CSRF to use double cookie method

Fixes the issue csrf issue highlight in #23 with the merged pr #24

⭐ @ThrawnCA thanks for the disclosure and help in implementation on this release

Fix CSRF Protection

Merged PRs
#15 fix/csrf_invalid_rejection
#13 fix/rename_class_to_be_vendor_neutral
#10 open-data/canada-fixes
#9 leesdolphin-add-debugging-information
#5 bzar:patch-2

0.1.0

Add LICENSE.md