Our current pinning relates to a now defunct Django and Python constraint. It is proposed that we remove this pinning as from the projects PyPi page (below) we can now use the latest available.

PyPi: https://pypi.org/project/django-oauth-toolkit/
Changelog: https://github.com/jazzband/django-oauth-toolkit/blob/master/CHANGELOG.md

The Changelog notes a number of breaking changes between our current version and the latest.

A likely related pinning that should be addressed also within this issue.

oauthlib = "==3.1.0"  # Last Python 2.7 compat + 3.7 compat.