Remove token and Update to 1.7.0

[ryanluker]

@mackosx

Work

• Remove token from IDToken
• Add schema migration to remove token
• Update to 1.7.0

Important Commits

7f891c1
f4a4bc7
6e46403
3997c82 - Django 4.0 doesn't support python 3.9?

New Schema Migrations

Migration reasons django-oauth#1056

    operations = [
        migrations.AlterField(
            model_name='accesstoken',
            name='user',
            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='%(app_label)s_%(class)s', to=settings.AUTH_USER_MODEL),
        ),
        migrations.AlterField(
            model_name='application',
            name='user',
            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='%(app_label)s_%(class)s', to=settings.AUTH_USER_MODEL),
        ),
        migrations.AlterField(
            model_name='grant',
            name='user',
            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='%(app_label)s_%(class)s', to=settings.AUTH_USER_MODEL),
        ),
        migrations.AlterField(
            model_name='idtoken',
            name='user',
            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='%(app_label)s_%(class)s', to=settings.AUTH_USER_MODEL),
        ),
        migrations.AlterField(
            model_name='refreshtoken',
            name='user',
            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='%(app_label)s_%(class)s', to=settings.AUTH_USER_MODEL),
        ),
    ]

[mackosx]

Hmmm

py39-djmain: install_deps> python -I -m pip install coverage djangorestframework jwcrypto 'oauthlib>=3.1.0' pytest pytest-cov pytest-django pytest-mock pytest-xdist requests https://github.com/django/django/archive/main.tar.gz
ERROR: Package 'django' requires a different Python: 3.9.16 not in '>=3.10'

For some reason the 3.9/3.2 tests are also running the py39-djmain tests...

[ryanluker]

Hmmm

py39-djmain: install_deps> python -I -m pip install coverage djangorestframework jwcrypto 'oauthlib>=3.1.0' pytest pytest-cov pytest-django pytest-mock pytest-xdist requests https://github.com/django/django/archive/main.tar.gz
ERROR: Package 'django' requires a different Python: 3.9.16 not in '>=3.10'

For some reason the 3.9/3.2 tests are also running the py39-djmain tests...

Yeahhhhh I am trying to steal some of this from the "future" test.yml as the old yml had no django 4.0 knowledge and it was breaking the tests when it tried to use 4 with 3.9.16.

[mackosx]

Oooh this is cool! We should add this (maybe after the migration is done)

[ryanluker]

yeah reduce the burden on that table a bunch...

[mackosx]

🎉

[ryanluker]

Yep it was in the lower versions, so we could get this feature now, we might need to see how to rotate though as did they make this backwards compatible for us who uses a single value?

[ryanluker]

I have a ticket logged here but it shouldn't blow up in the meantime... 😅
https://app.shortcut.com/greenspace/story/78692/adjust-usage-of-the-oidc-rsa-private-key-to-allow-for-multiple

[mackosx]

question: Did we figure out what changes these operations are doing?

I don't see any changes to the models file that would cause this. Maybe its just a Django 4 related change?

[ryanluker]

Yeah I couldn't figure it out exactly why they needed this noop PR but I am pretty sure it is due to django 4
django-oauth#1056