2.3.0-rc.10
Pre-release
Pre-release
RC for e2e testing — phase 1 (backend). Ships everything merged since 2.3.0-rc.9: the multi-tenant SSO epic (org-scoped admin, verified domains, home realm discovery), WebAuthn/passkey backend, TOTP lockout + recovery-code hashing, OAuth discovery cache + Twitter PKCE fix, and synchronous password-reset session revocation.
Note: the login UI (web/app) still bundles authorizer-react 2.1.0 here — the passkey/TOTP-lockout UI lands in a follow-up RC (2.3.0-rc.11) once authorizer-react 2.2.0-rc.0 is published and web/app is bumped. This RC is for backend/API e2e.