27.0.0
What's Changed
- Breaking: removed
account.createJWT; useusers.createJWTinstead. A leaked JWT could mint further JWTs, letting a credential outlive its own expiry — a session cannot duplicate itself to live forever either - Breaking: removed
project.createKey. A leaked key could mint further hidden keys, making a compromise far harder to contain and revoke - Added: TablesDB migration methods
listMigrations,createMigration,getMigration,deleteMigration, andcutoverMigration, plus theDatabaseMigrationandDatabaseMigrationListmodels - Added:
users.getMFAChallengeand theMfaChallengeSecretmodel - Added:
project.updateMFAFactorsPolicyand thePolicyMfaFactorsmodel - Added:
installationScopesparameter toproject.updateOAuth2Server - Added:
customauthentication factor,mfa-factorsproject policy, and theembeddings.writekey scope - Updated: dedicated database status, replicas, operation, and pricing models
Full Changelog: 26.2.0...27.0.0