## pallets-eco/flask-security — 5.8.3…5.9.0

_122 commits._

### Features
- **Add a test to ensure remember_me doesn't imply fresh session verifica… (#1290)** (d88c796)
- **Add a test to ensure remember_me doesn't imply fresh session verification** (f732dd5)
- **Chore - drop 3.10 support; improve pre-commit (#1287)** (5d47d69)
- **Chore - drop 3.10 support; improve pre-commit** (1da258d)
- **Convert usernameUtil to use new input_svn method. (#1271)** (96e41c0)
- **Convert usernameUtil to use new input_svn method.** (2005028)
- **Add IsString and IsStringOrInt validators to reject non-string field values from JSON requests (#1258)** (2e29e93)
- **add mypy ignore** (ec9bf88)
- **add IsStringOrInt() test case.** (8742d41)
- **add special case handling** (30638bd)
- **add IsString()** (456f996)
- **add new function test case** (b94654e)
- **add localization test for IsString()** (f3992a5)
- **add IsStringOrInt()** (2acc0e0)
- **add IsString() validation to no validation fields** (f7879aa)
- **add nullable to IsString() for use with Optional(); add IsString()** (a402224)
- **add IsString validator** (0ee3bf3)
- **Add input validation to webauthn name (#1255)** (e2d2abd)
- **Add input validation to webauthn name** (e9c5353)
- **Add link/code timeout to unified signin and two factor email templates. (#1249)** (c5c9255)
- **Add link/code timeout to unified signin and two factor email templates.** (24dbac8)
- **Add link timeout to confirmation and reset email templates. (#1245)** (ef01ce7)
- **Add link timeout to confirmation and reset email templates.** (3a425d2)
- **Add support for logout CSRF (#1239)** (32a732d)
- **Add support for logout CSRF** (1ac0085)
- **Remove PonyORM support (#1232)** (3a24949)
- **Remove PonyORM support** (e22143d)
- **Support for storing refresh token in a cookie. (#1230)** (ff762d1)
- **Support for storing refresh token in a cookie.** (b9b6b01)
- **Add revoke refresh token/tracker on logout (#1211)** (1a9b880)

### Fixes
- **fix(caching): put cache headers only on responses from fs** (061898c)
- **fix english style** (37f7569)
- **Fix login form remember checkbox (#1253)** (ead70e9)
- **Fix login form remember checkbox** (f6d6877)
- **Fix timezone-dependent refresh token test (#1247)** (2bcedcc)
- **Fix timezone-dependent refresh token test** (6f289b5)
- **Fix possible open-redirect with ALLOW_SUBDOMAIN option. (#1223) (#1225)** (5c44c76)
- **Fix possible open-redirect with ALLOW_SUBDOMAIN option. (#1223)** (e45a7cb)
- **Fix GHSA-97r5-pg8x-p63p - possible to 'verify' an account using a different users oauth credentials. (#1216)** (24d5e34)
- **Fix inverted is_locked logic. (#1214)** (92af5c5)

### Backend
- **Release Version 5.9** (98fd02e)
- **Out with dependabot (#1286)** (66c5604)
- **Out with dependabot** (702235f)
- **Convert requirements to dependency_groups (#1284)** (2fd3b6e)
- **Convert requirements to dependency_groups** (0d91554)
- **More work on pyright --verifytypes (#1283)** (357f36f)
- **Merge branch 'main' into type8** (6b16620)
- **More work on pyright --verifytypes** (4e0eb11)
- **Amended ES translation for 5.9.0 (#1281)** (505f346)
- **Merge branch 'main' into es-translation-5.9.0** (5baa770)
- **Updated IT translation for 5.9.0 (#1280)** (f44110b)
- **Merge branch 'main' into main** (735dda7)
- **Updated FR translation for 5.9.0 (#1282)** (34eaff9)
- **year** (d616be8)
- **year** (96ea713)
- **Updated FR translation for 5.9.0** (a256297)
- **Amended ES translation for 5.9.0** (8558a28)
- **Updated IT translation for 5.9.0** (a415b90)
- **Reexport public interface names. (#1276)** (6b25cc8)
- **Merge branch 'main' into type7** (b7cc651)
- **Reexport public interface names.** (4bec02d)
- **Update Catalan and Spanish translations (#1275)** (3013c14)
- **Update Catalan and Spanish translations.** (53ec975)
- **Chore - docs, translations (#1274)** (f99a5db)
- **Chore - docs, translations** (23b6ef1)
- **Change translation unit tests to use test locale. (#1273)** (4de10aa)
- **Change translation unit tests to use test locale.** (a359d6d)
- **Include next on verify and us-verify forms (#1270)** (2ba034f)
- **Include next on verify and us-verify forms.** (dd45e31)
- **Apply `SECURITY_CACHE_CONTROL` only to Flask-Security endpoints (#1264)** (a52b6a3)
- **Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the github-actions group (#1260)** (3a0bc27)
- **Bump pypa/gh-action-pypi-publish in the github-actions group** (f52ec2a)
- **Match REDIRECT_BASE_DOMAIN as well as subdomains (#1259)** (f1b2c1d)
- **Merge branch 'main' into allow-redirect-base-domain** (fa9dcf3)
- **Allow redirecting to the base domain with '.'** (c50786d)
- **Merge branch 'main' into feature/is-string-validator** (53be51e)
- **split if conditions into nested ifs for clearer logic** (c090803)
- **Update CHANGES.rst** (b343a6a)
- **Match REDIRECT_BASE_DOMAIN as well as subdomains** (95366db)
- **fmt** (e68a9cc)
- **update changes.rst** (bc6df5e)
- **fmt** (d7cded9)
- **Bump the github-actions group with 2 updates (#1257)** (34ad26d)
- **Bump the github-actions group with 2 updates** (6a32a97)
- **Bump actions/cache from 5 to 6 in the github-actions group (#1251)** (640b1d6)
- **Merge branch 'main' into dependabot/github_actions/github-actions-6d1c06d137** (60b8b07)
- **Replace bleach with nh3 for sanitization (#1252)** (81a99ea)
- **Replace bleach with nh3 for sanitization** (ecf99cb)
- **Bump actions/cache from 5 to 6 in the github-actions group** (8e5cd51)
- **Make all email template paths configurable. (#1250)** (92b3019)
- **Make all email template paths configurable.** (c45d85d)
- **Merge branch 'main' into totpwithin** (d9fba4e)
- **Bump actions/checkout from 6 to 7 in the github-actions group (#1248)** (f8d2d20)
- **Bump actions/checkout from 6 to 7 in the github-actions group** (00bccf6)
- **Merge branch 'main' into my-branch** (d424808)
- **Use humanize to localize timedelta variables (#1242)** (17b3c81)
- **Merge branch 'main' into humanize** (fe6895e)
- **Use humanize to localize timedelta variables** (26a0058)
- **Bump codecov/codecov-action from 6 to 7 in the github-actions group across 1 directory (#1238)** (4a3134c)
- **Merge branch 'main' into dependabot/github_actions/github-actions-484570b1b1** (5327d44)
- **Convert _WITHIN config to timedelta (#1241)** (e880c74)
- **Convert _WITHIN config to timedelta** (2448b98)
- **Bump codecov/codecov-action** (51dd2c6)
- **Remove deprecated get_token_status() and replace with check_and_get_t… (#1240)** (6cb6a19)
- **Remove deprecated get_token_status() and replace with check_and_get_token_status().** (0f95455)
- **Change config defaults for cookies. (#1236)** (8239ba5)
- **Change config defaults for cookies.** (7c6fba7)
- **Change default LOGOUT method to POST. (#1235)** (1a5ae5c)
- **Change default LOGOUT method to POST.** (777c935)
- **Reject WebAuthn verify assertion bound to a different user (#1234)** (2313ab2)
- **Reject WebAuthn verify assertion bound to a different user** (d1b61e4)
- **Change TOKEN_MAX_AGE to accept timedelta and default to 15 minutes. (#1233)** (680f940)
- **Change TOKEN_MAX_AGE to accept timedelta and default to 15 minutes.** (b4402b5)
- **Chore - cbor2 now works again; remove pypy tests. (#1231)** (9ddfb33)
- **Chore - cbor2 now works again; remove pypy tests.** (dcf9de6)
- **Merge branch 'main' into tokencookie1227** (c644f68)
- **Bump dessant/lock-threads from 6.0.0 to 6.0.2 in the github-actions group (#1229)** (6498873)
- **Bump dessant/lock-threads in the github-actions group** (4ec86d9)
- **Use options_to_json_dict API instead of having to get the json, decode it, and encode it again. (#1217)** (834ea88)
- **Make tests work with latest wtforms. (#1218)** (dd9fbf8)
- **Update Catalan and Spanish translations. (#1210)** (33155cd)
- **Refresh Token feature. (#1207)** (f28bdbd)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/pallets-eco/flask-security?utm_source=github-action)._