Skip to content

v0.3.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Jun 19:12
v0.3.1
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: BsdGvKi3Med56Wy4VisZQhWin20c4hORHHUxNM9bVlw
Verified
Learn about vigilant mode.
8b65d24
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

First release that pairs with current nr-passkeys-be 0.9 — the dependency constraint is widened to ^0.6 || ^0.7 || ^0.8 || ^0.9, so installations can combine the frontend extension with the latest backend passkey stack from a tagged release instead of dev-main.

Localization

The JavaScript modules gained a localization bridge, and the extension now ships German and French translations alongside English.

Security and compatibility

  • The enrollment skip form uses TYPO3's native CSRF protection.
  • Credential handling migrated to CredentialRecord for webauthn-lib 5.3.
  • InjectPasskeyBanner works on both TYPO3 v13 and v14 (dual-compatibility fix).
  • Enforcement cache invalidation and the grace-period check were corrected; recovery and enrollment templates lost dead code paths.

Internals

PHPUnit 12 runs warning-free, the SAST pipeline documents its two remaining false positives with rationale, and the per-group adoption-stats service declares its real (int-keyed) return type for PHPStan level 10.

Note on v0.3.0

Skip v0.3.0: its tag was briefly published from the wrong commit and is immutably pinned there on Packagist (it resolves to a pre-release state of main without the CSRF and webauthn-lib 5.3 fixes). v0.3.1 is the intended release; the v0.3.0 git tag was restored to the reference Packagist serves, per Packagist's version-immutability guidance.

Installation

composer require netresearch/nr-passkeys-fe:^0.3.1
Assets 12
Loading