From 9a703920c67df4c3cfc4cd86d131df0981287382 Mon Sep 17 00:00:00 2001
From: byrman <carsten.byrman@nelen-schuurmans.nl>
Date: Mon, 23 Sep 2024 14:30:05 +0200
Subject: [PATCH] Require authlib>=1.3.1

---
 CHANGES.rst | 3 +++
 setup.py    | 3 ++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGES.rst b/CHANGES.rst
index fa69a5a..3bd05ca 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -7,6 +7,9 @@ Changelog of nens-auth-client
 
 - README fixes and updates (``path()`` instead of ``url()``, for instance).
 
+- Require "authlib>=1.3.1" because of
+  https://security.snyk.io/vuln/SNYK-PYTHON-AUTHLIB-7231109.
+
 
 1.6.0 (2024-03-20)
 ------------------
diff --git a/setup.py b/setup.py
index 3498443..732ccc1 100644
--- a/setup.py
+++ b/setup.py
@@ -11,7 +11,8 @@
 
 install_requires = [
     "Django",
-    "authlib>=1.2",
+    # https://security.snyk.io/vuln/SNYK-PYTHON-AUTHLIB-7231109
+    "authlib>=1.3.1",
     "django-appconf",
     "requests",
 ]