Skip to content

v4.0.2

Choose a tag to compare

View all tags
@madeyoga madeyoga released this 20 Oct 05:44
v4.0.2
bd093da
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • On a host with email-code sign-in only, POST /confirmIdentity/emailCode/send now returns 404 instead of 500. The step-up send route belongs to AddEmailCodeSendEndpoints or AddEmailCodeEndpoints.
  • On a password facade with passkeys, an extra MapCookieAuthEndpoints or MapIdentityManagementApi call now throws a clear Call AddPasswordEndpoints before ... error instead of passing silently.
  • Anonymous passkey ceremonies require an antiforgery token only for cookie sessions and JWT cookie refresh. Identity bearer and JWT body refresh clients complete passkey sign-in and sign-up without one. Signed-in passkey management still requires the token. On the 3.x facade, AddAuthEndpoints with IdentityBearer drops the token on the four /account/passkeys ceremonies, and the cookie facade is unchanged.
  • The packages now include XML docs for IntelliSense.

Packages: AuthEndpoints 4.0.2; AuthEndpoints.External.OAuth, AuthEndpoints.OAuth.GitHub and AuthEndpoints.OAuth.Google 4.0.1. No database migration.

Full notes: https://madeyoga.github.io/AuthEndpoints/versions/v4.0.2

Assets 2
Loading