Download Latest Version v2.6.3 source code.zip (2.2 MB)
Email in envelope

Get an email when there's a new version of BlackSheep

Home / v2.6.3
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-06-04 1.8 kB
v2.6.3 source code.tar.gz 2026-06-04 2.1 MB
v2.6.3 source code.zip 2026-06-04 2.2 MB
Totals: 3 Items   4.3 MB 0
  • Fix #673: JWTOpenIDTokensHandler.authenticate was discarding the Identity returned by the inner auth_handler, causing request.identity to always be empty. Also fixes the refresh token not being attached to the identity when a refresh token header is present.
  • Fix #675: fix OverflowError when serving large files inefficiently; get_chunks in scribe.pyx used a C int loop variable that overflows for responses larger than ~2 GB. Changed to Py_ssize_t.
  • Fix potential OverflowError in cookies.pyx: Cookie.max_age and the local variable in parse_cookie were declared as C int; changed to long long.
  • Fix #674: OpenAPI generator crashed with AttributeError when a handler returned AsyncIterable[ServerSentEvent] (or any collections.abc async-iterable generic). _try_get_schema_for_generic now skips types whose origin has no __parameters__.
  • Feature #679: add on_response async callback to serve_files() and serve_files_dynamic(). The callback receives (request, response) and can mutate the response in-place (e.g. inject a dynamic Content-Security-Policy header). It is called for every response produced by the static file handler.
  • Fix #643: use_authorization() no longer overrides exception handlers that the user has already registered for UnauthorizedError, ForbiddenError, AuthenticateChallenge, or RateLimitExceededError. Framework defaults are now installed via setdefault so user-defined handlers win regardless of registration order; by @jbbqqf.
Source: README.md, updated 2026-06-04