Release 0.1.2

What's Changed

• fix(magic-link): refuse a cross-origin sign-in before the link is spent by @johnnyhuirilef in #59
• docs: add a security policy by @kamilmysliwiec in #61
• feat(oidc): accept a function of the name as providers by @kamilmysliwiec in #52
• fix(account): give a link back when a step after its consume fails by @kamilmysliwiec in #63
• test(mfa): stop TOTP codes from crossing a step mid-request by @kamilmysliwiec in #62

Full Changelog: 0.1.1...0.1.2

Release 0.1.1

What's Changed

• fix(account): refuse a cross-origin sign-in before the link is spent by @johnnyhuirilef in #42
• feat(oidc): accept a function of the request as callbackUrl by @kamilmysliwiec in #44
• fix(magic-link): keep earlier links usable in a browser that asks again by @kamilmysliwiec in #45

New Contributors

• @johnnyhuirilef made their first contribution in #42

Full Changelog: 0.1.0...0.1.1

Release 0.1.0

What's Changed

• feat: support more jws algorithms for signing and verifying by @chidoziemfrancis in #11
• feat: send the refusal code as nest's error code, with optional details by @kamilmysliwiec in #29
• feat: let a session store hand validate() data it read with the session by @kamilmysliwiec in #28
• fix: keep the augmented user keys in the current user declaration by @kamilmysliwiec in #26
• fix: a failed session touch no longer fails the request by @kamilmysliwiec in #27
• fix: log a failed session touch once per spell of failures by @kamilmysliwiec in #32
• feat: mfa and refresh-token storage only for apps that configure them by @kamilmysliwiec in #33

New Contributors

• @chidoziemfrancis made their first contribution in #11

Full Changelog: https://github.com/nestjs/authentication/commits/0.1.0