v2.1.0

Features

• Added Veri::Session#switch_tenant method to move a session to another tenant
• Added password_set? method to check whether a user has a password

Bugs

• Fixed log_in using the previous tenant when current_tenant changes within the same request
• Fixed Veri::Session.in_tenant raising an error without a message when given an invalid tenant

v2.0.3

Bugs

• Fixed authentication raising NameError when the configured user model is not named User
• Fixed Rails commands failing when the configured user model class does not exist yet
• Fixed expired and inactive sessions still appearing as logged in on pages that don't require authentication
• Fixed locking a user not terminating their sessions until their next request
• Fixed password verification raising an error for users who have no password set
• Fixed cross-tenant shapeshifting not working

Misc

• The hashing algorithm can now be changed without breaking existing passwords

v2.0.2

Misc

• Clarified error message for non-existent user model

v2.0.1

Misc

• Minor performance improvements and internal refactoring

v2.0.0

Breaking

• Changed Veri::Session#shapeshift method signature to accept an optional tenant: keyword argument
• Veri::Session.prune now deletes only sessions with orphaned tenants and no longer removes inactive or expired sessions

Features

• Added Veri::Session#true_tenant method to fetch the original tenant of a session

Bugs

• Fixed issue with user impersonation across different tenants

Misc

• Dropped some unnecessary dependencies

To upgrade to v2.0.0, please refer to the migration guide

v1.1.0

Features

• Added Veri::Session.in_tenant method to fetch sessions for a specific tenant

Misc

• Added support for Rails 8.1

v1.0.1

Bugs

• Fixed tenant validation blocking Rails console and database commands when orphaned tenant classes exist

v1.0.0

Breaking

• Dropped support for Rails 7.1

Features

• Added support for pbkdf2 password hashing algorithm

Bugs

• Fixed error raised on Rails console commands when the database was not yet set up

v0.4.0

Breaking

• Changed veri_sessions table to support multi-tenancy
• Renamed revert_to_true_identity session method to to_true_identity
• Session method prune no longer accepts a user argument
• Session method terminate_all no longer accepts a user argument

Features

• Added multi-tenancy support
• Added session scopes to fetch active, expired, and inactive sessions
• Added user scopes to fetch locked and unlocked users

v0.3.1

Misc

• Minor improvements and code cleanup
• Relaxed dependency versions