OAuthLib Files

Introduction

The release 4.0.0 defines the foundation that enables AI contributions and will improve the maintenance of oauthlib by using AI agents, skills, code for both contributors and maintainers. It includes devcontainer, skills and cleanup of instructions.

What's Changed

Important: this release contains 2 breaking changes. See CHANGELOG.rst for details:

• Removed JSONP support from token revocation endpoint (#951)

• Client authentication validation reorganized across grants (#919, [#920]): the grant_type parameter is now validated before client authentication.

• Replace pyenv with uv in documentation and tooling by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/910

• Improve github action to publish package by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/915
• Add pre-commit to run linters, formatters, etc. on code changes by @cclauss in https://github.com/oauthlib/oauthlib/pull/918
• Fix client authentication for DeviceCodeGrant when getting a token by @hekhuisk in https://github.com/oauthlib/oauthlib/pull/920
• Add project URLs to this project's PyPI page by @Flimm in https://github.com/oauthlib/oauthlib/pull/921
• Fix a typo in ServiceApplicationClient docstring. by @rafalkrupinski in https://github.com/oauthlib/oauthlib/pull/923
• Correct grammar in function help by @verhovsky in https://github.com/oauthlib/oauthlib/pull/924
• Add Python 3.14 to the testing by @cclauss in https://github.com/oauthlib/oauthlib/pull/925
• Initial python/uv/tox devcontainer by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/930
• Fix ruff checks about unused variables by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/931
• Drop EOL Python 3.8 from CI by @auvipy in https://github.com/oauthlib/oauthlib/pull/932
• Set Open Collective username to 'oauthlib' by @auvipy in https://github.com/oauthlib/oauthlib/pull/933
• pre-commit autoupdate 2026_02_21 by @cclauss in https://github.com/oauthlib/oauthlib/pull/934
• Remove a trailing whitespace fo fix failing pre-commit by @cclauss in https://github.com/oauthlib/oauthlib/pull/935
• Fix typos discovered by typos by @cclauss in https://github.com/oauthlib/oauthlib/pull/938
• Add resource to Request._params by @juannyG in https://github.com/oauthlib/oauthlib/pull/942
• Release 3.4.0: Add OAuthLib Maintainer agent by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/950
• Remove JSONP support from token revocation by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/951
• Improve PKCE code comparison by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/963
• Release 4.0.0: bump and update changelog by @JonathanHuot in https://github.com/oauthlib/oauthlib/pull/976

New Contributors

• @hekhuisk made their first contribution in https://github.com/oauthlib/oauthlib/pull/920
• @Flimm made their first contribution in https://github.com/oauthlib/oauthlib/pull/921
• @verhovsky made their first contribution in https://github.com/oauthlib/oauthlib/pull/924
• @juannyG made their first contribution in https://github.com/oauthlib/oauthlib/pull/942

Full Changelog: https://github.com/oauthlib/oauthlib/compare/v3.3.1...v4.0.0