Skip to content

0.5.0: remove session and OAuth state, and lower the dependency floors #421

Closed
#450
Closed
0.5.0: remove session and OAuth state, and lower the dependency floors#421
#450
Labels
breaking-changeChanges public behaviour or API; needs a minor/major releaseoauth-stateStateManager: one-time OAuth state tokenssessionSession management subsystem
Milestone
0.5.0

Description

@allen0099
allen0099
opened on Oct 2, 2026

Follow-up to #420, which deprecates both subsystems in 0.4.0.

  • Delete fastapi_cachex/session/, fastapi_cachex/state/, their tests, examples, docs pages (English and zh-TW), API reference pages and nav entries, and the jwt extra.
  • @cache: drop the X-Session-Token and session-middleware special cases. Authorization, Cookie and a non-empty request.session from any session middleware still bypass the cache.
  • Drop itsdangerous and the direct starlette>=1.0.0 requirement. Find the lowest fastapi / starlette the core really needs with tox -e lowest, and record the new floors.
  • MIGRATING section for 0.5.0.

Activity

  1. allen0099
    added this to the 0.5.0 milestone on Oct 2, 2026
  2. allen0099
    added
    sessionSession management subsystem
    breaking-changeChanges public behaviour or API; needs a minor/major release
    oauth-stateStateManager: one-time OAuth state tokens
    on Oct 2, 2026

  3. allen0099 commented on Oct 2, 2026

    @allen0099
    allen0099
    on Oct 2, 2026
    OwnerAuthor

    Also for 0.5.0 (from #428): BaseCacheBackend._delete_reporting counts a None result from a third-party delete() as removed, with a FutureWarning. In 0.5.0, drop that compat path and treat None as False (bool(result)), and update the test test_fallbacks_count_a_none_delete_as_removed_and_warn and the backend-delete section of the migration guide.

  4. allen0099
    added 2 commits that reference this issue on Oct 8, 2026

    feat!: remove session and OAuth state (#421)

    f224255

    fix: keep hashing X-Session-Token in vary keys (#421)

    57af2b6
  5. allen0099
    closed this as completedin c818565on Oct 14, 2026
  6. allen0099
    added a commit that references this issue on Oct 14, 2026

    fix: keep hashing X-Session-Token in vary keys (#421)

    a3e926e
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    breaking-changeChanges public behaviour or API; needs a minor/major releaseoauth-stateStateManager: one-time OAuth state tokenssessionSession management subsystem

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions