AuthLab 0.1.0 Alpha

Highlights

• First alpha release of AuthLab.
• Establishes the secure multi-tenant foundation, account security flows, and baseline OIDC/SAML testing experience that the later beta work builds on.

Included in 0.1.0 Alpha

• Core account and workspace platform:
  • team-based multi-tenant app management
  • role-based access controls
  • admin settings and email-provider configuration
  • user profile and account settings flows
• Account security features:
  • email verification
  • password reset
  • TOTP MFA setup and verification
  • passkey registration and login
  • idle-session handling and secure session storage
• Baseline protocol testing:
  • OIDC Authorization Code + PKCE
  • SAML SP-initiated and IdP-initiated sign-in
  • metadata import and parsing
  • inspector baseline for claims, decoded JWTs, and raw payload views
• Security and platform hardening:
  • encrypted secret storage
  • token hashing and TTL enforcement
  • CSP/CSRF protections
  • hardened profile image handling
  • Prisma/Turso production-readiness work

Notes

• This alpha release predates the later Phase 1 through Phase 4 enterprise workbench expansion.
• Advanced token lifecycle tooling, enterprise SAML controls, trace logging, device flow, PAR, token exchange, claims diff, and SCIM mock provisioning are not part of this release line.

Verification

• Alpha branch validation at the time of release included the project quality gates used for the release branch process.

Release Position

• GitHub prerelease only.
• Superseded functionally by v0.2.0-beta, but retained as the original alpha milestone.