Skip to content

Version 8.7.0

Latest
Latest

Choose a tag to compare

View all tags
@p3dr0rv p3dr0rv released this 12 Nov 19:51
v8.7.0
055b062
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • [PATCH] Update common @25.1.0
  • [PATCH] Remove Native Auth V2 isInvalidCredentials; rejected passwords submitted through PasswordRequiredStateV2 use isInvalidPassword. isInvalidUsername now reflects local validation only. V1 is unchanged.
  • [PATCH] Classify Native Auth V2 user-not-found and password-validation errors from structured service fields, and require invalid_grant/web_redirect_required for service-requested browser fallback.
  • [PATCH] Native Auth V2 MFA/enrollment code failures use isInvalidChallenge instead of isInvalidCode. Remove isUserAlreadyExists, isAuthMethodBlocked, and isVerificationContactBlocked; inspect raw diagnostics on general errors instead. V1 is unchanged.
  • [PATCH] Use password-free NativeAuthSignInParametersV2 with signInV2; supply passwords through PasswordRequiredStateV2.submitPassword. V1 sign-in is unchanged.
  • [PATCH] Return AuthMethodSelectionRequired when Native Auth V2 sign-in offers multiple supported first-factor methods instead of choosing one automatically.
  • [PATCH] Add AuthMethodSelectionRequired for password reset and existing-account sign-up with multiple supported methods.
  • [PATCH] Separate V1 and V2 password-reset parameters with NativeAuthResetPasswordParametersV2.
  • [PATCH] Native Auth V2 sign-up sends the username at start and retains profile attributes until collection.
  • [PATCH] Add password-free NativeAuthSignUpParametersV2 and remove upfront password retention from V2 sign-up.
  • [PATCH] Remove Native Auth V2 AttributesInvalidStateV2 and NativeAuthResultV2.AttributesInvalid.
  • [PATCH] Native Auth V2 errors now use NativeAuthErrorV2. Replace operation-specific V2 error type checks with its classifiers; rejected sign-in passwords use isInvalidCredentials, not isInvalidPassword. V1 is unchanged (AB#3784695).
  • [PATCH] Native Auth V2 sign-in, sign-up and password-reset entries accept scopes and claims. Scope is also sent at token exchange; claims are sent only at entry. Null continuation scopes retain entry scopes, while explicit empty scopes request default OIDC scopes (AB#3784690).
  • [PATCH] Update Native Auth V2 error mapping and MFA routing, Fixes AB#3808200 (#2639)
  • [PATCH] Remove password from sign-in parameters, Fixes AB#3808198 (#2638)
  • [PATCH] Update Native Auth V2 sign-up, method selection, and parameters, Fixes AB#3803937 (#2630)
  • [MINOR] Implement Native Auth V2 JIT registration states, Fixes AB#3797292 (#2629)
Assets 2
Loading