News
django-allauth 65.19.1 released
Posted by Raymond Penners on 2026-08-13
Fixes IdP: Fixed an incorrect URL reverse in the OpenID Connect authorization template. It silently resolved to an empty form action (posting back to the same URL), so the flow kept working regardless. IdP: Redirectable errors from the authorization endpoint were not delivered to clients registered with an app native (non-http(s)) redirect_uri.
Read moredjango-allauth 65.19.0 released
Posted by Raymond Penners on 2026-08-06
Noteworthy changes Officially support Django 6.1. IdP: Added support for Client ID Metadata Document (CIMD). IdP: Added IDP_OIDC_REFRESH_TOKEN_EXPIRES_IN, allowing refresh tokens to expire. Combined with IDP_OIDC_ROTATE_REFRESH_TOKEN, this results in a sliding (inactivity) window. Defaults to None (no expiry), preserving the previous behavior.
Read moreShowcasing allauth IdP: build an MCP server
Posted by Raymond Penners on 2026-05-29
Introduction The allauth.idp (Identity Provider) package was introduced last year, yet it remains relatively unknown. What better way to put it on people's radar than building a demo? Given all the buzz around LLMs, let's showcase its capabilities by building an MCP server that authenticates via OIDC, using nothing but plain Django and django-allauth.
Read moredjango-allauth 65.18.0 released
Posted by Raymond Penners on 2026-05-29
Noteworthy changes The password2 (password confirmation) field on the set/change/reset password forms now carries autocomplete="new-password", matching password1. This allows browser and password manager "suggest strong password" features to fill both fields as a pair. IdP: Added support for Dynamic Client Registration.
Read moredjango-allauth 65.17.0 released
Posted by Raymond Penners on 2026-05-20
Noteworthy changes Added new socialaccount provider: Klaviyo. Rate limiting now truncates IPv6 addresses to their network prefix (default /64) to prevent bypass via address rotation. Configurable via ALLAUTH_RATE_LIMIT_IPV6_PREFIX. Added authenticate_by_email hook to DefaultSocialAccountAdapter, allowing customization of user lookup and email matching during social login.
Read more