Skip to content

v4.1.0

Latest
Latest

Choose a tag to compare

View all tags
@madeyoga madeyoga released this 31 Oct 15:17
v4.1.0
a6f2d41
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Active sessions (opt-in): GET /sessions, DELETE /sessions/{id}, and POST /sessions/revokeOthers let users see and sign out other browsers or devices, for cookie and JWT sessions.
  • AddPasswordAuth<TUser, TRole, TContext> registers Identity roles on the password facade.
  • GET /external/providers lists registered sign-in providers, and the external account routes map when no provider is registered.
  • GET /manage/2fa returns recoveryCodesLeft. Enabling two-factor keeps the step-up confirmation; a header token comes back renewed in X-AuthEndpoints-Reauth.
  • JWT startup fails with a named property when the selected algorithm's signing key is missing.

Packages: AuthEndpoints 4.1.0. AuthEndpoints.External.OAuth, AuthEndpoints.OAuth.GitHub, and AuthEndpoints.OAuth.Google stay at 4.0.1. No database migration unless active sessions are turned on; that migration adds the AuthEndpointsActiveSessions table and, with JWT, a nullable SessionId column on refresh tokens.

Full notes: https://madeyoga.github.io/AuthEndpoints/versions/v4.1.0

Assets 2
Loading