Skip to content

v2.7.0

Choose a tag to compare

View all tags
@thegdsks thegdsks released this 05 Oct 21:37
· 129 commits to main since this release
v2.7.0
31d073c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • OAuth: OAuthConfig.RedirectURI hook, RedirectURIAllowedHosts, AllowInsecureRedirectURI, own-route OAuthStart/OAuthCallback
  • WebAuthn: UserHandleResolver for imported passkeys with foreign user handles
  • Admin password reset now clears per-IP login backoff (LoginThrottleEntryDeleter)
  • Logs no longer contain email addresses (user_id or email_ref instead)
  • Password rehash fix: OnLegacyHashAccepted fires after a legacy bcrypt rehash

All API changes are additive.

Assets 8
Loading