v0.4.2

Security, Stability & Dev Environment Improvements

This release focuses on hardening authentication flows, stabilizing billing logic, and introducing a Docker-based development environment via Laravel Sail.

Security Improvements

• Prevented potential OAuth account takeover by enforcing stricter provider matching
• Secured social login flow to avoid unsafe account linking
• Reduced verification email spam using session-based throttling
• Limited unnecessary exposure of 2FA-related data

Billing & Subscription Fixes

• Fixed incorrect handling of free-tier subscription periods
• Enforced active plan validation across billing flows
• Improved transaction safety in billing operations
• Resolved edge cases in webhook handling and billing behaviour
• Ensured subscription plan factory slugs are unique

Testing & Reliability

• Fixed failing billing tests caused by outdated assumptions
• Restored missing model factories for billing-related models
• General test cleanup and improved consistency

Developer Experience

• Added Laravel Sail support for a consistent Docker-based local environment
• Updated .gitignore for container-based workflows
• Replaced auth() helper with Auth facade to improve compatibility with Intelephense
• Updated MySQL SSL configuration to use PHP 8.5-compatible constants

Miscellaneous

• Improved verification flow UX with debounced prompts
• General codebase cleanup and internal consistency improvements

Notes

• If upgrading, ensure your environment supports the updated MySQL SSL configuration (PHP 8.5+ compatible)
• Recommended to use Sail for local development going forward

Full Changelog: v0.4.1...v0.4.2