Skip to content

v1.1.1

Latest

Choose a tag to compare

@dgates82 dgates82 released this 22 Sep 14:38
eb7e369

CodeQL static analysis, a README overhaul, and a real PII-in-logs fix — no breaking API changes.

Added

  • CodeQL static analysis (.github/workflows/codeql.yml), analyzing csharp via GitHub's
    Advanced Setup, independent of SonarQube Cloud. Runs on push to main/release/**, on
    PRs, weekly on a schedule, and via workflow_dispatch.

Changed

  • README restructured — a live-demo callout, a grouped feature list, a MapIdentityApi
    compatibility note (verified against ASP.NET Core Identity source), a
    providers-at-a-glance table, and a package-ecosystem table. Full per-provider
    configuration moved to docs/CONFIGURATION.md.

Fixed

  • Recipient email addresses and phone numbers are now masked before being logged, and no
    longer appear in exception messages thrown on send failure. Debug-level logging no
    longer includes the email/SMS message body or subject line. MaskPhone always masks,
    even for short input. Closes CodeQL's cs/exposure-of-sensitive-information findings
    from the first scan. Masking is currently hardcoded; making it configurable is tracked
    in #18.

Install

dotnet add package DGates.Identity.NotificationProviders --version 1.1.1