2.5.0

Added

• Added 2FA support! See the docs (#118)

Fixed

• Fixed issue with public mutations throwing null $user errors. Thanks @robinbeatty for the PR! (#125)

2.4.0

Added

• Added ability to skip activation status on incoming requests (useful for multi-step registration flows) (#83)
• Added ability to assign JWTs to the public schema (#122)
• Added editable messages for account locked and account cooldown authentication errors (#121)

2.3.1

Fixed

• Fixed issue with users sometimes being permanently granted Control Panel access (#120)
• Fixed issue with field permissions falling back to the public schema when passing Bearer tokens (#119)

2.3.0

Added

• Added 'magic link' authentication! To get started, enable it in your plugin settings and see the docs (#107)

2.2.1

Fixed

• Fixed issue with settings breadcrumb being hardcoded to /settings (#117)

2.2.0

Added

• Added support for Microsoft OAuth sign in
• Added deleteSocialAccount mutation, for deleting password-less accounts. Throws an error if run on an account with a password (#110)

Fixed

• Fixed issue with accounts not automatically activating (#114, thanks @Stalex89!)
• Fixed issue with plugin's field restrictions not applying to public schema (#109, thanks @Zsavajji!)

2.1.2

Fixed

• Fixed issue with mutation field validation throwing an error (#103)
• Fixed issue with social registration not marking users as active if skip activation is enabled (#100)

2.1.1

Misc

• Ensure Twitter OAuth credentials are removed from session

2.1.0

Added

• Added setting to skip user activation when registering through social mutations (#100)

Changed

• firstName and lastName have been migrated to fullName across all register and viewer mutations (#101)

Fixed

• Fixed updateViewer mutation not updating user's name (use fullName parameter, as above) (#101)
• Fixed deleteAccount mutation not deleting user (#102)

2.0.0

Added

• Added Craft 4 support! (#94) – huge thanks to Brandon Kelly for the PR!
• Added deleteAccount mutation (#84)

Changed

• PHP >8.0 is now required
• Craft >4.0 is now required
• The email verification email is now sent out to users when updating their email via the updateViewer mutation (#90)
• When using the JWT returned from a register mutation to authenticate requests, all requests will throw a Please activate your account error until the account is activated (#83)

Fixed

• When users register through a social mutation, they now receive an appropriate activation email (if enabled), rather than the set password email (#72)