Redundant or overly strict dependencies

[fortzi]

Checklist

• I have looked into the Readme and Examples, and have not found a suitable solution or answer.
• I have looked into the API documentation and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Description

Few things to consider:

1. The package's dependencies limit FastAPI's version to be <0.116.0, which was released in July 2025. This limits who can use it.
2. Uvicorn is a non-dev dependency. Can that be changed? Many people don't use it in production.

Reproduction

1. Try to install the package in an existing FastAPI project

Additional context

No response

auth0-fastapi-api version

1.0.0b5

Python version

3.13

[DennisSchwartz]

I have the same issue

[julianhumble1]

I also have the same issue regarding the fastapi version compatibility. It looks as though there is an open PR which updates the supported fastapi version #68 , just failing on a vulnerability check

[lventosa]

The same happened to me and I just saw that a fix was commited earlier today. Is there an estimate date for the release?

[kishore7snehil]

👋 @fortzi , Thank you for reporting this .

We've loosened fastapi and httpx version constraints (removed upper bounds) and moved uvicorn out of runtime dependencies entirely in #77.Released in 1.0.0b6. Appreciate you taking the time to flag this, feedback like this helps us improve the SDK for everyone.