v0.17.0

What's Changed

• Update verdaccio packages by @esadakcam in #19
• Implement atomic WebAuthn token retrieval (61a1ead)
• Improve OpenID configuration discovery (7da942c)
• Enhance plugin access control (0ba2974)

Security

• Remove sensitive token logging (8d9f1d2)

  • Removed raw token information from debug outputs in Plugin, AuthCore, WebFlow, WebAuthFlow, and CliFlow modules
  • Prevents accidental exposure of authentication tokens in logs

• Refactor CLI token execution (5d7006b)

  • Changed npm config command execution from shell-based (execSync) to argument-based (execFileSync)
  • Eliminates command injection vulnerabilities via query parameters
  • Improves security posture for CLI authentication workflows

New Contributors

• @esadakcam made their first contribution in #19

Full Changelog: v0.16.0...v0.17.0