2.4.0-rc.1
Pre-release
Pre-release
What's Changed
- test: fix make test-all-db TempDir cleanup race by @lakhansamani in #677
- feat: server-side user search + user org membership in dashboard by @lakhansamani in #678
- chore: fix js vulnerability (bump vitest, refresh lockfiles) by @lakhansamani in #683
- feat(mfa)!: enable MFA by default and make it optional by @lakhansamani in #682
- fix: search users by ID + show member email in org lists by @lakhansamani in #680
- feat(meta): expose per-method MFA availability for the login UI by @lakhansamani in #681
- fix(mfa): honor MFA availability in dashboard toggle + align admin check with login by @lakhansamani in #679
- feat(mfa): add --disable-mfa one-way global kill switch by @lakhansamani in #684
- feat(mfa): optional MFA setup, passkey as a second factor, and close the EnforceMFA passkey bypass by @lakhansamani in #685
- test(perf): add local load-test harness for token/s2s/FGA layers by @lakhansamani in #687
- feat(mfa): behavior redesign — withheld-token first-time setup, WebAuthn/Email/SMS as MFA factors, lockout + admin recovery by @lakhansamani in #686
- fix(docker): install git in node-builder for github: react dep by @lakhansamani in #688
Full Changelog: 2.4.0-rc.0...2.4.0-rc.1