Release 4.8.0

Changed

• Fixed Gitea backend API authentication headers
• Improved RelayState and attributes handling in the SAML backend
  • Missing configured attributes now cause an AuthMissingParameter error
• Changed domains for VK backend
• All API calls now include User-Agent header
• OIDC uses info from id_token when not present in the response
• Bring back option to skip and customize at_hash validation in OIDC
• Dropped support for Python 3.9 and added support for Python 3.14
• Invalid API token will now raise AuthTokenError
• The extra_data method of backends now receives pipeline arguments as pipeline_kwargs

Added

• Auth0 OIDC backend
• Inactive users can be allowed to authenticate using ALLOW_INACTIVE_USERS_LOGIN
• Support group whitelisting in CAS