v1.0.0-beta.12

What's Changed

• fix: harden dev mode env guard by @itpropro in #157
• docs: fix type errors in additional parameters of keycloak provider by @huntout in #131
• fix: resolve provider runtime configuration by @itpropro in #186
• fix(auth): prevent client-supplied auth params from overriding reserved OIDC fields by @itpropro in #158
• fix(callback): preserve session redirect url before clearing auth session by @cgarnier in #160
• fix(auth): restore safe callback redirects by @itpropro in #188
• fix(config): allow secretless public clients by @itpropro in #189
• fix(auth): add strict token validation by @itpropro in #190
• test(auth): prove strict token validation by @itpropro in #192
• docs(auth0): explain opaque access tokens by @itpropro in #193
• fix(auth): preserve token request values by @itpropro in #194
• fix(session): replace token-derived data by @itpropro in #195
• fix(auth): validate refreshed tokens by @itpropro in #196
• test(config): verify production runtime overrides by @itpropro in #197
• test(session): verify token exposure overrides by @itpropro in #198
• fix(auth): preserve sessions after stale callbacks by @itpropro in #199
• fix(sso): respect Nuxt app base URL by @itpropro in #200
• fix(logout): preserve per-call redirect URI by @itpropro in #201
• test: add integrated release compatibility coverage by @itpropro in #202
• test: establish two-tier e2e CI foundation by @itpropro in #217
• test: include Zitadel public client in provider CI by @itpropro in #218
• test: include Entra External ID in provider CI by @itpropro in #219
• test: verify Microsoft hosted login by @itpropro in #220
• test: exclude PayPal provider by @itpropro in #221
• docs: record release verification by @itpropro in #222
• fix(deps): remediate release security alerts by @itpropro in #230
• fix(release): enforce artifact provenance by @itpropro in #231
• chore(release): prepare v1.0.0-beta.12 by @itpropro in #232
• fix(release): publish with npm trusted identity by @itpropro in #233
• fix(session): refresh opaque tokens by provider expiry by @itpropro in #234
• fix: harden beta.12 OIDC runtime behavior by @itpropro in #263
• docs: upgrade and restore static publication by @itpropro in #265
• fix(docs): preserve external navigation links by @itpropro in #266
• ci(docs): add exact-main preview by @itpropro in #267
• ci(docs): deploy docs changes from main by @itpropro in #268
• fix: harden authentication defaults and dev-mode gating by @itpropro in #269
• fix(release): harden trusted npm publication by @itpropro in #271
• fix(release): recognize unpublished pnpm versions by @itpropro in #272
• fix(release): prepare workspace before package build by @itpropro in #273

New Contributors

• @huntout made their first contribution in #131
• @cgarnier made their first contribution in #160

Full Changelog: v1.0.0-beta.11...v1.0.0-beta.12