Release Notes

Warning

The current page still doesn’t have a translation for this language.

But you can help translating it: Contributing.

Latest Changes

0.68.1

Translations

  • 🌐 Add Portuguese translation of docs/fastapi-people.md. PR #3461 by @ComicShrimp.
  • 🌐 Add Chinese translation for docs/tutorial/dependencies/dependencies-in-path-operation-decorators.md. PR #3492 by @jaystone776.
  • 🔧 Add new Translation tracking issues for German and Indonesian. PR #3718 by @tiangolo.
  • 🌐 Add Chinese translation for docs/tutorial/dependencies/sub-dependencies.md. PR #3491 by @jaystone776.
  • 🌐 Add Portuguese translation for docs/advanced/index.md. PR #3460 by @ComicShrimp.
  • 🌐 Portuguese translation of docs/async.md. PR #1330 by @Serrones.
  • 🌐 Add French translation for docs/async.md. PR #3416 by @Smlep.

Internal

0.68.0

Features

Docs

  • 📝 Update docs about async and response-model with more gender neutral language. PR #1869 by @Edward-Knight.

Translations

  • 🌐 Add Russian translation for docs/python-types.md. PR #3039 by @dukkee.
  • 🌐 Add Chinese translation for docs/tutorial/dependencies/index.md. PR #3489 by @jaystone776.
  • 🌐 Add Russian translation for docs/external-links.md. PR #3036 by @dukkee.
  • 🌐 Add Chinese translation for docs/tutorial/dependencies/global-dependencies.md. PR #3493 by @jaystone776.
  • 🌐 Add Portuguese translation for docs/deployment/versions.md. PR #3618 by @lsglucas.
  • 🌐 Add Japanese translation for docs/tutorial/security/oauth2-jwt.md. PR #3526 by @sattosan.

Internal

  • ✅ Add the docs_src directory to test coverage and update tests. Initial PR #1904 by @Kludex.
  • 🔧 Add new GitHub templates with forms for new issues. PR #3612 by @tiangolo.
  • 📝 Add official FastAPI Twitter to docs: @fastapi. PR #3578 by @tiangolo.

0.67.0

Features

Docs

  • 📝 Add external link: How to Create A Fake Certificate Authority And Generate TLS Certs for FastAPI. PR #2839 by @aitoehigie.
  • ✏ Fix code highlighted line in: body-nested-models.md. PR #3463 by @jaystone776.
  • ✏ Fix typo in body-nested-models.md. PR #3462 by @jaystone776.
  • ✏ Fix typo “might me” -> “might be” in docs/en/docs/tutorial/schema-extra-example.md. PR #3362 by @dbrakman.
  • 📝 Add external link: Building simple E-Commerce with NuxtJS and FastAPI. PR #3271 by @ShahriyarR.
  • 📝 Add external link: Serve a machine learning model using Sklearn, FastAPI and Docker. PR #2974 by @rodrigo-arenas.
  • ✏️ Fix typo on docstring in datastructures file. PR #2887 by @Kludex.
  • 📝 Add External Link: Deploy FastAPI on Ubuntu and Serve using Caddy 2 Web Server. PR #3572 by @tiangolo.
  • 📝 Add External Link, replaces #1898. PR #3571 by @tiangolo.

Internal

  • 🎨 Improve style for sponsors, add radius border. PR #2388 by @Kludex.
  • 👷 Update GitHub Action latest-changes. PR #3574 by @tiangolo.
  • 👷 Update GitHub Action latest-changes. PR #3573 by @tiangolo.
  • 👷 Rename and clarify CI workflow job names. PR #3570 by @tiangolo.
  • 👷 Update GitHub Action latest-changes, strike 2 ⚾. PR #3575 by @tiangolo.
  • 🔧 Sort external links in docs to have the most recent at the top. PR #3568 by @tiangolo.

0.66.1

Translations

Internal

  • 🔧 Configure strict pytest options and update/refactor tests. Upgrade pytest to >=6.2.4,<7.0.0 and pytest-cov to >=2.12.0,<3.0.0. Initial PR #2790 by @graingert.
  • ⬆️ Upgrade python-jose dependency to >=3.3.0,<4.0.0 for tests. PR #3468 by @tiangolo.

0.66.0

Features

  • ✨ Allow setting the response_class to RedirectResponse or FileResponse and returning the URL from the function. New and updated docs are in the tutorial section Custom Response - HTML, Stream, File, others, in RedirectResponse and in FileResponse. PR #3457 by @tiangolo.

Fixes

  • 🐛 Fix include/exclude for dicts in jsonable_encoder. PR #2016 by @Rubikoid.
  • 🐛 Support custom OpenAPI / JSON Schema fields in the generated output OpenAPI. PR #1429 by @jmagnusson.

Translations

  • 🌐 Add Spanish translation for tutorial/query-params.md. PR #2243 by @mariacamilagl.
  • 🌐 Add Spanish translation for advanced/response-directly.md. PR #1253 by @jfunez.
  • 🌐 Add Spanish translation for advanced/additional-status-codes.md. PR #1252 by @jfunez.
  • 🌐 Add Spanish translation for advanced/path-operation-advanced-configuration.md. PR #1251 by @jfunez.

0.65.3

Fixes

  • ♻ Assume request bodies contain JSON when no Content-Type header is provided. This fixes a breaking change introduced by 0.65.2 with PR #2118. It should allow upgrading FastAPI applications with clients that send JSON data without a Content-Type header. And there’s still protection against CSRFs. PR #3456 by @tiangolo.

Translations

  • 🌐 Initialize Indonesian translations. PR #3014 by @pace-noge.
  • 🌐 Add Spanish translation of Tutorial - Path Parameters. PR #2219 by @mariacamilagl.
  • 🌐 Add Spanish translation of Tutorial - First Steps. PR #2208 by @mariacamilagl.
  • 🌐 Portuguese translation of Tutorial - Body - Fields. PR #3420 by @ComicShrimp.
  • 🌐 Add Chinese translation for Tutorial - Request - Forms - and - Files. PR #3249 by @jaystone776.
  • 🌐 Add Chinese translation for Tutorial - Handling - Errors. PR #3299 by @jaystone776.
  • 🌐 Add Chinese translation for Tutorial - Form - Data. PR #3248 by @jaystone776.
  • 🌐 Add Chinese translation for Tutorial - Body - Updates. PR #3237 by @jaystone776.
  • 🌐 Add Chinese translation for FastAPI People. PR #3112 by @hareru.
  • 🌐 Add French translation for Project Generation. PR #3197 by @Smlep.
  • 🌐 Add French translation for Python Types Intro. PR #3185 by @Smlep.
  • 🌐 Add French translation for External Links. PR #3103 by @Smlep.
  • 🌐 Add French translation for Alternatives, Inspiration and Comparisons. PR #3020 by @rjNemo.
  • 🌐 Fix Chinese translation code snippet mismatch in Tutorial - Python Types Intro. PR #2573 by @BoYanZh.
  • 🌐 Add Portuguese translation for Development Contributing. PR #1364 by @Serrones.
  • 🌐 Add Chinese translation for Tutorial - Request - Files. PR #3244 by @jaystone776.

Internal

0.65.2

Security fixes

  • 🔒 Check Content-Type request header before assuming JSON. Initial PR #2118 by @patrickkwang.

This change fixes a CSRF security vulnerability when using cookies for authentication in path operations with JSON payloads sent by browsers.

In versions lower than 0.65.2, FastAPI would try to read the request payload as JSON even if the content-type header sent was not set to application/json or a compatible JSON media type (e.g. application/geo+json).

So, a request with a content type of text/plain containing JSON data would be accepted and the JSON data would be extracted.

But requests with content type text/plain are exempt from CORS preflights, for being considered Simple requests. So, the browser would execute them right away including cookies, and the text content could be a JSON string that would be parsed and accepted by the FastAPI application.

See CVE-2021-32677 for more details.

Thanks to Dima Boger for the security report! 🙇🔒

Internal

0.65.1

Security fixes

0.65.0

Breaking Changes - Upgrade

  • ⬆️ Upgrade Starlette to 0.14.2, including internal UJSONResponse migrated from Starlette. This includes several bug fixes and features from Starlette. PR #2335 by @hanneskuettner.

Translations

Internal

  • 👷 Add GitHub Action cache to speed up CI installs. PR #3204 by @tiangolo.
  • ⬆️ Upgrade setup-python GitHub Action to v2. PR #3203 by @tiangolo.
  • 🐛 Fix docs script to generate a new translation language with overrides boilerplate. PR #3202 by @tiangolo.
  • ✨ Add new Deta banner badge with new sponsorship tier 🙇. PR #3194 by @tiangolo.
  • 👥 Update FastAPI People. PR #3189 by @github-actions[bot].
  • 🔊 Update FastAPI People to allow better debugging. PR #3188 by @tiangolo.

0.64.0

Features

Fixes

  • 📌 Pin SQLAlchemy range for tests, as it doesn’t use SemVer. PR #3001 by @tiangolo.
  • 🎨 Add newly required type annotations for mypy. PR #2882 by @tiangolo.
  • 🎨 Remove internal “type: ignore”, now unnecessary. PR #2424 by @AsakuraMizu.

Docs

  • 📝 Add link to article in Russian “FastAPI: знакомимся с фреймворком”. PR #2564 by @trkohler.
  • 📝 Add external link to blog post “Authenticate Your FastAPI App with Auth0”. PR #2172 by @dompatmore.
  • 📝 Fix broken link to article: Machine learning model serving in Python using FastAPI and Streamlit. PR #2557 by @davidefiocco.
  • 📝 Add FastAPI Medium Article: Deploy a dockerized FastAPI application to AWS. PR #2515 by @vjanz.
  • ✏ Fix typo in Tutorial - Handling Errors. PR #2486 by @johnthagen.
  • ✏ Fix typo in Security OAuth2 scopes. PR #2407 by @jugmac00.
  • ✏ Fix typo/clarify docs for SQL (Relational) Databases. PR #2393 by @kangni.
  • 📝 Add external link to “FastAPI for Flask Users”. PR #2280 by @amitness.

Translations

  • 🌐 Fix Chinese translation of Tutorial - Query Parameters, remove obsolete content. PR #3051 by @louis70109.
  • 🌐 Add French translation for Tutorial - Background Tasks. PR #3098 by @Smlep.
  • 🌐 Fix Korean translation for docs/ko/docs/index.md. PR #3159 by @SueNaEunYang.
  • 🌐 Add Korean translation for Tutorial - Query Parameters. PR #2390 by @hard-coders.
  • 🌐 Add French translation for FastAPI People. PR #2232 by @JulianMaurin.
  • 🌐 Add Korean translation for Tutorial - Path Parameters. PR #2355 by @hard-coders.
  • 🌐 Add French translation for Features. PR #2157 by @Jefidev.
  • 👥 Update FastAPI People. PR #3031 by @github-actions[bot].
  • 🌐 Add Chinese translation for Tutorial - Debugging. PR #2737 by @blt232018.
  • 🌐 Add Chinese translation for Tutorial - Security - OAuth2 with Password (and hashing), Bearer with JWT tokens. PR #2642 by @waynerv.
  • 🌐 Add Korean translation for Tutorial - Header Parameters. PR #2589 by @mode9.
  • 🌐 Add Chinese translation for Tutorial - Metadata and Docs URLs. PR #2559 by @blt232018.
  • 🌐 Add Korean translation for Tutorial - First Steps. PR #2323 by @hard-coders.
  • 🌐 Add Chinese translation for Tutorial - CORS (Cross-Origin Resource Sharing). PR #2540 by @blt232018.
  • 🌐 Add Chinese translation for Tutorial - Middleware. PR #2334 by @lpdswing.
  • 🌐 Add Korean translation for Tutorial - Intro. PR #2317 by @hard-coders.
  • 🌐 Add Chinese translation for Tutorial - Bigger Applications - Multiple Files. PR #2453 by @waynerv.
  • 🌐 Add Chinese translation for Tutorial - Security - Security Intro. PR #2443 by @waynerv.
  • 🌐 Add Chinese translation for Tutorial - Header Parameters. PR #2412 by @maoyibo.
  • 🌐 Add Chinese translation for Tutorial - Extra Data Types. PR #2410 by @maoyibo.
  • 🌐 Add Japanese translation for Deployment - Docker. PR #2312 by @tokusumi.
  • 🌐 Add Japanese translation for Deployment - Versions. PR #2310 by @tokusumi.
  • 🌐 Add Chinese translation for Tutorial - Cookie Parameters. PR #2261 by @alicrazy1947.
  • 🌐 Add Japanese translation for Tutorial - Static files. PR #2260 by @tokusumi.
  • 🌐 Add Japanese translation for Tutorial - Testing. PR #2259 by @tokusumi.
  • 🌐 Add Japanese translation for Tutorial - Debugging. PR #2256 by @tokusumi.
  • 🌐 Add Japanese translation for Tutorial - Middleware. PR #2255 by @tokusumi.
  • 🌐 Add Japanese translation for Concurrency and async / await. PR #2058 by @tokusumi.
  • 🌐 Add Chinese translation for Tutorial - Security - Simple OAuth2 with Password and Bearer. PR #2514 by @waynerv.
  • 🌐 Add Japanese translation for Deployment - Deta. PR #2314 by @tokusumi.
  • 🌐 Add Chinese translation for Tutorial - Security - Get Current User. PR #2474 by @waynerv.
  • 🌐 Add Japanese translation for Deployment - Manually. PR #2313 by @tokusumi.
  • 🌐 Add Japanese translation for Deployment - Intro. PR #2309 by @tokusumi.
  • 🌐 Add Japanese translation for FastAPI People. PR #2254 by @tokusumi.
  • 🌐 Add Japanese translation for Advanced - Path Operation Advanced Configuration. PR #2124 by @Attsun1031.
  • 🌐 Add Japanese translation for External Links. PR #2070 by @tokusumi.
  • 🌐 Add Japanese translation for Tutorial - Body - Updates. PR #1956 by @SwftAlpc.
  • 🌐 Add Japanese translation for Tutorial - Form Data. PR #1943 by @SwftAlpc.
  • 🌐 Add Japanese translation for Tutorial - Cookie Parameters. PR #1933 by @SwftAlpc.

Internal

0.63.0

Features

  • ✨ Improve type annotations, add support for mypy —strict, internally and for external packages. PR #2547 by @tiangolo.

Breaking changes

  • ⬆️ Upgrade Uvicorn when installing fastapi[all] to the latest version including uvloop, the new range is uvicorn[standard] >=0.12.0,<0.14.0. PR #2548 by @tiangolo.

Fixes

  • 🐛 PR #2547 (read above) also fixes some false-positive mypy errors with callbacks parameters and when using the OAuth2 class.

Docs

Translations

  • 🌐 Add docs lang selector widget. PR #2542 by @tiangolo.
  • 🌐 Add Chinese translation for Tutorial - Response Status Code. PR #2442 by @waynerv.
  • 🌐 Start translation of the documentation for the Albanian language. PR #2516 by @vjanz.
  • 🌐 Add Chinese translation for Tutorial - Extra Models. PR #2416 by @waynerv.
  • 🌐 Add Chinese translation for Tutorial - Response Model. PR #2414 by @waynerv.
  • 🌐 Add Chinese translation for Tutorial - Schema Extra Example. PR #2411 by @maoyibo.
  • 🌐 Add Korean translation for Index. PR #2192 by @hard-coders.
  • 🌐 Add Japanese translation for Advanced User Guide - Additional Status Codes. PR #2145 by @Attsun1031.

Internal

  • 🐛 Fix docs overrides directory for translations. PR #2541 by @tiangolo.
  • ➖ Remove Typer as a docs building dependency (covered by typer-cli) to fix pip resolver conflicts. PR #2539 by @tiangolo.
  • ✨ Add newsletter: FastAPI and friends. PR #2509 by @tiangolo.
  • ✨ Add new Gold Sponsor: InvestSuite 🎉. PR #2508 by @tiangolo.
  • 🔧 Add issue template configs. PR #2476 by @tiangolo.

0.62.0

Features

  • ✨ Add support for shared/top-level parameters (dependencies, tags, etc). PR #2434 by @tiangolo.

Up to now, for several options, the only way to apply them to a group of path operations was in include_router. That works well, but the call to app.include_router() or router.include_router() is normally done in another file.

That means that, for example, to apply authentication to all the path operations in a router it would end up being done in a different file, instead of keeping related logic together.

Setting options in include_router still makes sense in some cases, for example, to override or increase configurations from a third party router included in an app. But in a router that is part of a bigger application, it would probably make more sense to add those settings when creating the APIRouter.

In FastAPI

This allows setting the (mostly new) parameters (additionally to the already existing parameters):

  • default_response_class: updated to handle defaults in APIRouter and include_router.
  • dependencies: to include ✨ top-level dependencies ✨ that apply to the whole application. E.g. to add global authentication.
  • callbacks: OpenAPI callbacks that apply to all the path operations.
  • deprecated: to mark all the path operations as deprecated. 🤷
  • include_in_schema: to allow excluding all the path operations from the OpenAPI schema.
  • responses: OpenAPI responses that apply to all the path operations.

For example:

  1. from fastapi import FastAPI, Depends
  4. async def some_dependency():
  5.     return
  8. app = FastAPI(dependencies=[Depends(some_dependency)])

In APIRouter

This allows setting the (mostly new) parameters (additionally to the already existing parameters):

  • default_response_class: updated to handle defaults in APIRouter and include_router. For example, it’s not needed to set it explicitly when creating callbacks.
  • dependencies: to include ✨ router-level dependencies ✨ that apply to all the path operations in a router. Up to now, this was only possible with include_router.
  • callbacks: OpenAPI callbacks that apply to all the path operations in this router.
  • deprecated: to mark all the path operations in a router as deprecated.
  • include_in_schema: to allow excluding all the path operations in a router from the OpenAPI schema.
  • responses: OpenAPI responses that apply to all the path operations in a router.
  • prefix: to set the path prefix for a router. Up to now, this was only possible when calling include_router.
  • tags: OpenAPI tags to apply to all the path operations in this router.

For example:

  1. from fastapi import APIRouter, Depends
  4. async def some_dependency():
  5.     return
  8. router = APIRouter(prefix="/users", dependencies=[Depends(some_dependency)])

In include_router

Most of these settings are now supported in APIRouter, which normally lives closer to the related code, so it is recommended to use APIRouter when possible.

But include_router is still useful to, for example, adding options (like dependencies, prefix, and tags) when including a third party router, or a generic router that is shared between several projects.

This PR allows setting the (mostly new) parameters (additionally to the already existing parameters):

  • default_response_class: updated to handle defaults in APIRouter and FastAPI.
  • deprecated: to mark all the path operations in a router as deprecated in OpenAPI.
  • include_in_schema: to allow disabling all the path operations from showing in the OpenAPI schema.
  • callbacks: OpenAPI callbacks that apply to all the path operations in this router.

Note: all the previous parameters are still there, so it’s still possible to declare dependencies in include_router.

Breaking Changes

  • PR #2434 includes several improvements that shouldn’t affect normal use cases, but could affect in advanced scenarios:
    • If you are testing the generated OpenAPI (you shouldn’t, FastAPI already tests it extensively for you): the order for tags in include_router and path operations was updated for consistency, but it’s a simple order change.
    • If you have advanced custom logic to access each route’s route.response_class, or the router.default_response_class, or the app.default_response_class: the default value for response_class in APIRoute and for default_response_class in APIRouter and FastAPI is now a DefaultPlaceholder used internally to handle and solve default values and overrides. The actual response class inside the DefaultPlaceholder is available at route.response_class.value.

Docs

Translations

  • 🌐 Add Japanese translation for Advanced - Custom Response. PR #2193 by @Attsun1031.
  • 🌐 Add Chinese translation for Benchmarks. PR #2119 by @spaceack.
  • 🌐 Add Chinese translation for Tutorial - Body - Nested Models. PR #1609 by @waynerv.
  • 🌐 Add Chinese translation for Advanced - Custom Response. PR #1459 by @RunningIkkyu.
  • 🌐 Add Chinese translation for Advanced - Return a Response Directly. PR #1452 by @RunningIkkyu.
  • 🌐 Add Chinese translation for Advanced - Additional Status Codes. PR #1451 by @RunningIkkyu.
  • 🌐 Add Chinese translation for Advanced - Path Operation Advanced Configuration. PR #1447 by @RunningIkkyu.
  • 🌐 Add Chinese translation for Advanced User Guide - Intro. PR #1445 by @RunningIkkyu.

Internal

  • 🔧 Update TestDriven link to course in sponsors section. PR #2435 by @tiangolo.
  • 🍱 Update sponsor logos. PR #2418 by @tiangolo.
  • 💚 Fix disabling install of Material for MkDocs Insiders in forks, strike 1 ⚾. PR #2340 by @tiangolo.
  • 🐛 Fix disabling Material for MkDocs Insiders install in forks. PR #2339 by @tiangolo.
  • ✨ Add silver sponsor WeTransfer. PR #2338 by @tiangolo.
  • ✨ Set up and enable Material for MkDocs Insiders for the docs. PR #2325 by @tiangolo.

0.61.2

Fixes

  • 📌 Relax Swagger UI version pin. PR #2089 by @jmriebold.
  • 🐛 Fix bug overriding custom HTTPException and RequestValidationError from exception_handlers. PR #1924 by @uriyyo.
  • ✏️ Fix typo on dependencies utils and cleanup unused variable. PR #1912 by @Kludex.

Docs

Translations

  • 🌐 Add Japanese translation for Advanced Tutorial - Response Directly. PR #2191 by @Attsun1031.
  • 📝 Add Japanese translation for Tutorial - Security - First Steps. PR #2153 by @komtaki.
  • 🌐 Add Japanese translation for Tutorial - Query Parameters and String Validations. PR #1901 by @SwftAlpc.
  • 🌐 Add Portuguese translation for External Links. PR #1443 by @Serrones.
  • 🌐 Add Japanese translation for Tutorial - CORS. PR #2125 by @tokusumi.
  • 🌐 Add Japanese translation for Contributing. PR #2067 by @komtaki.
  • 🌐 Add Japanese translation for Project Generation. PR #2050 by @tokusumi.
  • 🌐 Add Japanese translation for Alternatives. PR #2043 by @Attsun1031.
  • 🌐 Add Japanese translation for History Design and Future. PR #2002 by @komtaki.
  • 🌐 Add Japanese translation for Benchmarks. PR #1992 by @komtaki.
  • 🌐 Add Japanese translation for Tutorial - Header Parameters. PR #1935 by @SwftAlpc.
  • 🌐 Add Portuguese translation for Tutorial - First Steps. PR #1861 by @jessicapaz.
  • 🌐 Add Portuguese translation for Python Types. PR #1796 by @izaguerreiro.
  • 🌐 Add Japanese translation for Help FastAPI. PR #1692 by @tokusumi.
  • 🌐 Add Japanese translation for Tutorial - Body. PR #1683 by @tokusumi.
  • 🌐 Add Japanese translation for Tutorial - Query Params. PR #1674 by @tokusumi.
  • 🌐 Add Japanese translation for tutorial/path-params.md. PR #1671 by @tokusumi.
  • 🌐 Add Japanese translation for tutorial/first-steps.md. PR #1658 by @tokusumi.
  • 🌐 Add Japanese translation for tutorial/index.md. PR #1656 by @tokusumi.
  • 🌐 Add translation to Portuguese for Project Generation. PR #1602 by @Serrones.
  • 🌐 Add Japanese translation for Features. PR #1625 by @tokusumi.
  • 🌐 Initialize new language Korean for translations. PR #2018 by @hard-coders.
  • 🌐 Add Portuguese translation of Deployment. PR #1374 by @Serrones.

Internal

  • 🔥 Cleanup after upgrade for Docs Previews GitHub Action. PR #2248 by @tiangolo.
  • 🐛 Fix CI docs preview, unzip docs. PR #2246 by @tiangolo.
  • ✨ Add instant docs deploy previews for PRs from forks. PR #2244 by @tiangolo.
  • ⚡️ Build docs for languages in parallel in subprocesses to speed up CI. PR #2242 by @tiangolo.
  • 🐛 Fix docs order generation for partial translations. PR #2238 by @tiangolo.
  • 👥 Update FastAPI People. PR #2202 by @github-actions[bot].
  • ♻️ Update FastAPI People GitHub Action to send the PR as github-actions. PR #2201 by @tiangolo.
  • 🔧 Update FastAPI People GitHub Action config, run monthly. PR #2199 by @tiangolo.
  • 🐛 Fix FastAPI People GitHub Action Docker dependency, strike 1 ⚾. PR #2198 by @tiangolo.
  • 🐛 Fix FastAPI People GitHub Action Docker dependencies. PR #2197 by @tiangolo.
  • 🐛 Fix FastAPI People GitHub Action when there’s nothing to change. PR #2196 by @tiangolo.
  • 👥 Add new section FastAPI People. PR #2195 by @tiangolo.
  • ⬆️ Upgrade GitHub Action Latest Changes. PR #2190 by @tiangolo.
  • ⬆️ Upgrade GitHub Action Label Approved. PR #2189 by @tiangolo.
  • 🔧 Update GitHub Action Label Approved, run at 12:00. PR #2185 by @tiangolo.
  • 👷 Upgrade GitHub Action Latest Changes. PR #2184 by @tiangolo.
  • 👷 Set GitHub Action Label Approved to run daily, not every minute. PR #2163 by @tiangolo.
  • 🔥 Remove pr-approvals GitHub Action as it’s not compatible with forks. Use the new one. PR #2162 by @tiangolo.
  • 👷 Add GitHub Action Latest Changes. PR #2160.
  • 👷 Add GitHub Action Label Approved. PR #2161.

0.61.1

Fixes

  • Fix issues using jsonable_encoder with SQLAlchemy models directly. PR #1987.

Docs

Translations

Internal

  • Improve docs maintainability by updating hl_lines syntax to use ranges. PR #1863 by @la-mar.

0.61.0

Features

  • Add support for injecting HTTPConnection (as Request and WebSocket). Useful for sharing app state in dependencies. PR #1827 by @nsidnev.
  • Export WebSocketDisconnect and add example handling WebSocket disconnections to docs. PR #1822 by @rkbeatss.

Breaking Changes

  • Require Pydantic > 1.0.0.
    • Remove support for deprecated Pydantic 0.32.2. This improves maintainability and allows new features.
    • In FastAPI and APIRouter:
      • Remove path operation decorators related/deprecated parameter response_model_skip_defaults (use response_model_exclude_unset instead).
      • Change path operation decorators parameter default for response_model_exclude from set() to None (as is in Pydantic).
    • In encoders.jsonable_encoder:
      • Remove deprecated skip_defaults, use instead exclude_unset.
      • Set default of exclude from set() to None (as is in Pydantic).
    • PR #1862.
  • In encoders.jsonable_encoder remove parameter sqlalchemy_safe.
    • It was an early hack to allow returning SQLAlchemy models, but it was never documented, and the recommended way is using Pydantic’s orm_mode as described in the tutorial: SQL (Relational) Databases.
    • PR #1864.

Docs

Internal

  • Add Flake8 linting. Original PR #1774 by @MashhadiNima.
  • Disable Gitter bot, as it’s currently broken, and Gitter’s response doesn’t show the problem. PR #1853.

0.60.2

0.60.1

  • Add debugging logs for GitHub actions to introspect GitHub hidden context. PR #1764.
  • Use OS preference theme for online docs. PR #1760 by @adriencaccia.
  • Upgrade Starlette to version 0.13.6 to handle a vulnerability when using static files in Windows. PR #1759 by @jamesag26.
  • Pin Swagger UI temporarily, waiting for a fix for swagger-api/swagger-ui#6249. PR #1763.
  • Update GitHub Actions, use commit from PR for docs preview, not commit from pre-merge. PR #1761.
  • Update GitHub Actions, refactor Gitter bot. PR #1746.

0.60.0

  • Add GitHub Action to watch for missing preview docs and trigger a preview deploy. PR #1740.
  • Add custom GitHub Action to get artifact with docs preview. PR #1739.
  • Add new GitHub Actions to preview docs from PRs. PR #1738.
  • Add XML test coverage to support GitHub Actions. PR #1737.
  • Update badges and remove Travis now that GitHub Actions is the main CI. PR #1736.
  • Add GitHub Actions for CI, move from Travis. PR #1735.
  • Add support for adding OpenAPI schema for GET requests with a body. PR #1626 by @victorphoenix3.

0.59.0

0.58.1

0.58.0

  • Deep merge OpenAPI responses to preserve all the additional metadata. PR #1577.
  • Mention in docs that only main app events are run (not sub-apps). PR #1554 by @amacfie.
  • Fix body validation error response, do not include body variable when it is not embedded. PR #1553 by @amacfie.
  • Fix testing OAuth2 security scopes when using dependency overrides. PR #1549 by @amacfie.
  • Fix Model for JSON Schema keyword not as a JSON Schema instead of a list. PR #1548 by @v-do.
  • Add support for OpenAPI servers. PR #1547 by @mikaello.

0.57.0

0.56.1

0.56.0

0.55.1

0.55.0

0.54.2

0.54.1

  • Update database test setup. PR #1226.
  • Improve test debugging by showing response text in failing tests. PR #1222 by @samuelcolvin.

0.54.0

0.53.2

0.53.1

0.53.0

0.52.0

0.51.0

  • Re-export utils from Starlette:
    • This allows using things like from fastapi.responses import JSONResponse instead of from starlette.responses import JSONResponse.
    • It’s mainly syntax sugar, a convenience for developer experience.
    • Now Request, Response, WebSocket, status can be imported directly from fastapi as in from fastapi import Response. This is because those are frequently used, to use the request directly, to set headers and cookies, to get status codes, etc.
    • Documentation changes in many places, but new docs and noticeable improvements:
    • PR #1064.

0.50.0

  • Add link to Release Notes from docs about pinning versions for deployment. PR #1058.
  • Upgrade code to use the latest version of Starlette, including:
    • Several bug fixes.
    • Optional redirects of slashes, with or without ending in /.
    • Events for routers, "startup", and "shutdown".
    • PR #1057.
  • Add docs about pinning FastAPI versions for deployment: Deployment: FastAPI versions. PR #1056.

0.49.2

0.49.1

  • Fix path operation duplicated parameters when used in dependencies and the path operation function. PR #994 by @merowinger92.
  • Update Netlify previews deployment GitHub action as the fix is already merged and there’s a new release. PR #1047.
  • Move mypy configurations to config file. PR #987 by @hukkinj1.
  • Temporary fix to Netlify previews not deployable from PRs from forks. PR #1046 by @mariacamilagl.

0.49.0

0.48.0

0.47.1

  • Fix model filtering in response_model, cloning sub-models. PR #889.
  • Fix FastAPI serialization of Pydantic models using ORM mode blocking the event loop. PR #888.

0.47.0

0.46.0

0.45.0

0.44.1

  • Add GitHub social preview images to git. PR #752.
  • Update PyPI “trove classifiers”. PR #751.
  • Add full support for Python 3.8. Enable Python 3.8 in full in Travis. PR 749.
  • Update “new issue” templates. PR #749.
  • Fix serialization of errors for exotic Pydantic types. PR #748 by @dmontagu.

0.44.0

0.43.0

0.42.0

  • Add dependencies with yield, a.k.a. exit steps, context managers, cleanup, teardown, …
    • This allows adding extra code after a dependency is done. It can be used, for example, to close database connections.
    • Dependencies with yield can be normal or async, FastAPI will run normal dependencies in a threadpool.
    • They can be combined with normal dependencies.
    • It’s possible to have arbitrary trees/levels of dependencies with yield and exit steps are handled in the correct order automatically.
    • It works by default in Python 3.7 or above. For Python 3.6, it requires the extra backport dependencies:
      • async-exit-stack
      • async-generator
    • New docs at Dependencies with yield.
    • Updated database docs SQL (Relational) Databases: Main FastAPI app.
    • PR #595.
  • Fix sitemap.xml in website. PR #598 by @samuelcolvin.

0.41.0

  • Upgrade required Starlette to 0.12.9, the new range is >=0.12.9,<=0.12.9.
    • Add State to FastAPI apps at app.state.
    • PR #593.
  • Improve handling of custom classes for Requests and APIRoutes.
    • This helps to more easily solve use cases like:
      • Reading a body before and/or after a request (equivalent to a middleware).
      • Run middleware-like code only for a subset of path operations.
      • Process a request before passing it to a path operation function. E.g. decompressing, deserializing, etc.
      • Processing a response after being generated by path operation functions but before returning it. E.g. adding custom headers, logging, adding extra metadata.
    • New docs section: Custom Request and APIRoute class.
    • PR #589 by @dmontagu.
  • Fix preserving custom route class in routers when including other sub-routers. PR #538 by @dmontagu.

0.40.0

0.39.0

  • Allow path parameters to have default values (e.g. None) and discard them instead of raising an error.
    • This allows declaring a parameter like user_id: str = None that can be taken from a query parameter, but the same path operation can be included in a router with a path /users/{user_id}, in which case will be taken from the path and will be required.
    • PR #464 by @jonathanunderwood.
  • Add support for setting a default_response_class in the FastAPI instance or in include_router. Initial PR #467 by @toppk.
  • Add support for type annotations using strings and from __future__ import annotations. PR #451 by @dmontagu.

0.38.1

0.38.0

  • Add recent articles to External Links and recent opinions. PR #490.
  • Upgrade support range for Starlette to include 0.12.8. The new range is >=0.11.1,<=0.12.8". PR #477 by @dmontagu.
  • Upgrade support to Pydantic version 0.32.2 and update internal code to use it (breaking change). PR #463 by @dmontagu.

0.37.0

0.36.0

  • Fix implementation for skip_defaults when returning a Pydantic model. PR #422 by @dmontagu.
  • Fix OpenAPI generation when using the same dependency in multiple places for the same path operation. PR #417 by @dmontagu.
  • Allow having empty paths in path operations used with include_router and a prefix.
    • This allows having a router for /cats and all its path operations, while having one of them for /cats.
    • Now it doesn’t have to be only /cats/ (with a trailing slash).
    • To use it, declare the path in the path operation as the empty string ("").
    • PR #415 by @vitalik.
  • Fix mypy error after merging PR #415. PR #462.

0.35.0

0.34.0

  • Upgrade Starlette supported range to include the latest 0.12.7. The new range is 0.11.1,<=0.12.7. PR #367 by @dedsm.

  • Add test for OpenAPI schema with duplicate models from PR #333 by @dmontagu. PR #385.

0.33.0

  • Upgrade Pydantic version to 0.30.0. PR #384 by @jekirl.

0.32.0

  • Fix typo in docs for features. PR #380 by @MartinoMensio.

  • Fix source code limit for example in Query Parameters. PR #366 by @Smashman.

  • Update wording in docs about OAuth2 scopes. PR #371 by @cjw296.

  • Update docs for Enums to inherit from str and improve Swagger UI rendering. PR #351.

  • Fix regression, add Swagger UI deep linking again. PR #350.

  • Add test for having path templates in prefix of .include_router. PR #349.

  • Add note to docs: Include the same router multiple times with different prefix. PR #348.

  • Fix OpenAPI/JSON Schema generation for two functions with the same name (in different modules) with the same composite bodies.

    • Composite bodies’ IDs are now based on path, not only on route name, as the auto-generated name uses the function names, that can be duplicated in different modules.
    • The same new ID generation applies to response models.
    • This also changes the generated title for those models.
    • Only composite bodies and response models are affected because those are generated dynamically, they don’t have a module (a Python file).
    • This also adds the possibility of using .include_router() with the same APIRouter multiple times, with different prefixes, e.g. /api/v2 and /api/latest, and it will now work correctly.
    • PR #347.

0.31.0

  • Upgrade Pydantic supported version to 0.29.0.

0.30.1

0.30.0

  • Add support for Pydantic’s ORM mode:

    • Updated documentation about SQL with SQLAlchemy, using Pydantic models with ORM mode, SQLAlchemy models with relations, separation of files, simplification of code and other changes. New docs: SQL (Relational) Databases.
    • The new support for ORM mode fixes issues/adds features related to ORMs with lazy-loading, hybrid properties, dynamic/getters (using @property decorators) and several other use cases.
    • This applies to ORMs like SQLAlchemy, Peewee, Tortoise ORM, GINO ORM and virtually any other.
    • If your path operations return an arbitrary object with attributes (e.g. my_item.name instead of my_item["name"]) AND you use a response_model, make sure to update the Pydantic models with orm_mode = True as described in the docs (link above).
    • New documentation about receiving plain dicts as request bodies: Bodies of arbitrary dicts.
    • New documentation about returning arbitrary dicts in responses: Response with arbitrary dict.
    • Technical Details:
      • When declaring a response_model it is used directly to generate the response content, from whatever was returned from the path operation function.
      • Before this, the return content was first passed through jsonable_encoder to ensure it was a “jsonable” object, like a dict, instead of an arbitrary object with attributes (like an ORM model). That’s why you should make sure to update your Pydantic models for objects with attributes to use orm_mode = True.
      • If you don’t have a response_model, the return object will still be passed through jsonable_encoder first.
      • When a response_model is declared, the same response_model type declaration won’t be used as is, it will be “cloned” to create an new one (a cloned Pydantic Field with all the submodels cloned as well).
      • This avoids/fixes a potential security issue: as the returned object is passed directly to Pydantic, if the returned object was a subclass of the response_model (e.g. you return a UserInDB that inherits from User but contains extra fields, like hashed_password, and User is used in the response_model), it would still pass the validation (because UserInDB is a subclass of User) and the object would be returned as-is, including the hashed_password. To fix this, the declared response_model is cloned, if it is a Pydantic model class (or contains Pydantic model classes in it, e.g. in a List[Item]), the Pydantic model class(es) will be a different one (the “cloned” one). So, an object that is a subclass won’t simply pass the validation and returned as-is, because it is no longer a sub-class of the cloned response_model. Instead, a new Pydantic model object will be created with the contents of the returned object. So, it will be a new object (made with the data from the returned one), and will be filtered by the cloned response_model, containing only the declared fields as normally.
    • PR #322.

  • Remove/clean unused RegEx code in routing. PR #314 by @dmontagu.

  • Use default response status code descriptions for additional responses. PR #313 by @duxiaoyao.

  • Upgrade Pydantic support to 0.28. PR #320 by @jekirl.

0.29.1

0.29.0

  • Add support for declaring a Response parameter:

0.28.0

  • Implement dependency cache per request.

    • This avoids calling each dependency multiple times for the same request.
    • This is useful while calling external services, performing costly computation, etc.
    • This also means that if a dependency was declared as a path operation decorator dependency, possibly at the router level (with .include_router()) and then it is declared again in a specific path operation, the dependency will be called only once.
    • The cache can be disabled per dependency declaration, using use_cache=False as in Depends(your_dependency, use_cache=False).
    • Updated docs at: Using the same dependency multiple times.
    • PR #292.

  • Implement dependency overrides for testing.

0.27.2

0.27.1

  • Fix auto_error=False handling in HTTPBearer security scheme. Do not raise when there’s an incorrect Authorization header if auto_error=False. PR #282.

  • Fix type declaration of HTTPException. PR #279.

0.27.0

0.26.0

0.25.0

  • Add support for Pydantic’s include, exclude, by_alias.

  • Add CONTRIBUTING.md file to GitHub, to help new contributors. PR #255 by @wshayes.

  • Add support for Pydantic’s skip_defaults:

0.24.0

  • Add support for WebSockets with dependencies and parameters.

  • Upgrade the compatible version of Pydantic to 0.26.0.

    • This includes JSON Schema support for IP address and network objects, bug fixes, and other features.
    • PR #247 by @euri10.

0.23.0

  • Upgrade the compatible version of Starlette to 0.12.0.

    • This includes support for ASGI 3 (the latest version of the standard).
    • It’s now possible to use Starlette’s StreamingResponse with iterators, like file-like objects (as those returned by open()).
    • It’s now possible to use the low level utility iterate_in_threadpool from starlette.concurrency (for advanced scenarios).
    • PR #243.

  • Add OAuth2 redirect page for Swagger UI. This allows having delegated authentication in the Swagger UI docs. For this to work, you need to add {your_origin}/docs/oauth2-redirect to the allowed callbacks in your OAuth2 provider (in Auth0, Facebook, Google, etc).

    • For example, during development, it could be http://localhost:8000/docs/oauth2-redirect.
    • Have in mind that this callback URL is independent of whichever one is used by your frontend. You might also have another callback at https://yourdomain.com/login/callback.
    • This is only to allow delegated authentication in the API docs with Swagger UI.
    • PR #198 by @steinitzu.

  • Make Swagger UI and ReDoc route handlers (path operations) be async functions instead of lambdas to improve performance. PR #241 by @Trim21.

  • Make Swagger UI and ReDoc URLs parameterizable, allowing to host and serve local versions of them and have offline docs. PR #112 by @euri10.

0.22.0

  • Add support for dependencies parameter:

    • A parameter in path operation decorators, for dependencies that should be executed but the return value is not important or not used in the path operation function.
    • A parameter in the .include_router() method of FastAPI applications and routers, to include dependencies that should be executed in each path operation in a router.
      • This is useful, for example, to require authentication or permissions in specific group of path operations.
      • Different dependencies can be applied to different routers.
    • These dependencies are run before the normal parameter dependencies. And normal dependencies are run too. They can be combined.
    • Dependencies declared in a router are executed first, then the ones defined in path operation decorators, and then the ones declared in normal parameters. They are all combined and executed.
    • All this also supports using Security with scopes in those dependencies parameters, for more advanced OAuth 2.0 security scenarios with scopes.
    • New documentation about dependencies in path operation decorators.
    • New documentation about dependencies in the include_router() method.
    • PR #235.

  • Fix OpenAPI documentation of Starlette URL convertors. Specially useful when using path convertors, to take a whole path as a parameter, like /some/url/{p:path}. PR #234 by @euri10.

  • Make default parameter utilities exported from fastapi be functions instead of classes (the new functions return instances of those classes). To be able to override the return types and fix mypy errors in FastAPI’s users’ code. Applies to Path, Query, Header, Cookie, Body, Form, File, Depends, and Security. PR #226 and PR #231.

  • Separate development scripts test.sh, lint.sh, and format.sh. PR #232.

  • Re-enable black formatting checks for Python 3.7. PR #229 by @zamiramir.

0.21.0

  • On body parsing errors, raise from previous exception, to allow better introspection in logging code. PR #192 by @ricardomomm.

  • Use Python logger named “fastapi“ instead of root logger. PR #222 by @euri10.

  • Upgrade Pydantic to version 0.25. PR #225 by @euri10.

  • Fix typo in routing. PR #221 by @djlambert.

0.20.1

  • Add typing information to package including file py.typed. PR #209 by @meadsteve.

  • Add FastAPI bot for Gitter. To automatically announce new releases. PR #189.

0.20.0

0.19.0

0.18.0

  • Add docs for HTTP Basic Auth. PR #177.

  • Upgrade HTTP Basic Auth handling with automatic headers (automatic browser login prompt). PR #175.

  • Update dependencies for security. PR #174.

  • Add docs for Middleware. PR #173.

0.17.0

0.16.0

0.15.0

0.14.0

  • Improve automatically generated names of path operations in OpenAPI (in API docs). A function read_items instead of having a generated name “Read Items Get” will have “Read Items”. PR #155.

  • Add docs for: Testing FastAPI. PR #151.

  • Update /docs Swagger UI to enable deep linking. This allows sharing the URL pointing directly to the path operation documentation in the docs. PR #148 by @wshayes.

  • Update development dependencies, Pipfile.lock. PR #150.

  • Include Falcon and Hug in: Alternatives, Inspiration and Comparisons.

0.13.0

  • Improve/upgrade OAuth2 scopes support with SecurityScopes:
    • SecurityScopes can be declared as a parameter like Request, to get the scopes of all super-dependencies/dependants.
    • Improve Security handling, merging scopes when declaring SecurityScopes.
    • Allow using SecurityBase (like OAuth2) classes with Depends and still document them. Security now is needed only to declare scopes.
    • Updated docs about: OAuth2 with Password (and hashing), Bearer with JWT tokens.
    • New docs about: OAuth2 scopes.
    • PR #141.

0.12.1

  • Fix bug: handling additional responses in APIRouter.include_router(). PR #140.

  • Fix typo in SQL tutorial. PR #138 by @mostaphaRoudsari.

  • Fix typos in section about nested models and OAuth2 with JWT. PR #127 by @mmcloud.

0.12.0

  • Add additional responses parameter to path operation decorators to extend responses in OpenAPI (and API docs).
    • It also allows extending existing responses generated from response_model, declare other media types (like images), etc.
    • The new documentation is here: Additional Responses.
    • responses can also be added to .include_router(), the updated docs are here: Bigger Applications.
    • PR #97 originally initiated by @barsi.
  • Update scripts/test-cov-html.sh to allow passing extra parameters like -vv, for development.

0.11.0

  • Add auto_error parameter to security utility functions. Allowing them to be optional. Also allowing to have multiple alternative security schemes that are then checked in a single dependency instead of each one verifying and returning the error to the client automatically when not satisfied. PR #134.

  • Update SQL Tutorial to close database sessions even when there are exceptions. PR #89 by @alexiri.

  • Fix duplicate dependency in pyproject.toml. PR #128 by @zxalif.

0.10.3

0.10.2

  • Fix OpenAPI (JSON Schema) for declarations of Python Union (JSON Schema additionalProperties). PR #121.

  • Update Background Tasks with a note on Celery.

  • Document response models using unions and lists, updated at: Extra Models. PR #108.

0.10.1

0.10.0

0.9.1

0.9.0

0.8.0

  • Make development scripts executable. PR #76 by @euri10.

  • Add support for adding tags in app.include_router(). PR #55 by @euri10. Documentation updated in the section: Bigger Applications.

  • Update docs related to Uvicorn to use new --reload option from version 0.5.x. PR #74.

  • Update isort imports and scripts to be compatible with newer versions. PR #75.

0.7.1

0.7.0

0.6.4

0.6.3

  • Add Favicons to docs. PR #53.

0.6.2

0.6.1

0.6.0

0.5.1

0.5.0

0.4.0

0.3.0

0.2.1

  • Fix jsonable_encoder for Pydantic models with Config but without json_encoders: #29.

0.2.0

  • Fix typos in Security section: #24 by @kkinder.

  • Add support for Pydantic custom JSON encoders: #21 by @euri10.

0.1.19

  • Upgrade Starlette version to the current latest 0.10.1: #17 by @euri10.