Release v1.23.0

Release v1.23.0

Changelog

Added

• Admin provisioning CLI — nowo:auth-kit:create-admin <identifier> [--auth-profile=NAME] (not --profile, which Symfony reserves for the console profiler) creates a user for an AuthKit profile with the roles from create_admin.roles (default [ROLE_ADMIN]). The password is always read twice from a hidden prompt (no option/argument, no visible fallback, refuses non-interactive runs), must reach create_admin.min_password_length (default 12) and, when the profile enables password_strength and nowo-tech/password-strength-bundle is installed, pass the same strength policy as the registration form. Duplicate identifiers are rejected. Bypasses registration_mode on purpose. Backed by the AdminUserCreator service; dispatches Nowo\AuthKitBundle\Admin\AdminUserCreatingEvent (before persist — fill host-specific fields) and AdminUserCreatedEvent (after flush — e.g. mark an install wizard as completed).
• Recipient-locale notifications — password-reset, magic-login and new-device notifications are prepared in the recipient account's preferred locale: the user entity implements Nowo\AuthKitBundle\Locale\PreferredLocaleAwareInterface (or recipient_locale.resolver names a RecipientLocaleResolverInterface service); when the locale is listed in locale.enabled, AuthKit generates the reset / magic link with that {_locale}, exposes it as recipientLocale on PasswordResetNotificationContext, MagicLoginNotificationContext and NewDeviceLoginNotificationContext, and calls the notifier (and dispatches PasswordResetRequestedEvent / MagicLoginRequestedEvent) inside Symfony's LocaleSwitcher::runWithLocale() so $translator->trans() without an explicit locale uses it; the request locale is restored afterwards (worker-safe). recipient_locale.enabled defaults to true and is a no-op for users without a preference.
• flash_trans Twig filter (flash.twig_filter, default on) — translates a flash key with the first domain of flash.twig_filter_domains (default [messages, NowoAuthKitBundle]) whose catalogue has it; unknown text and structured flashes pass through.
• AuthKitUrlGenerator::generate() / AuthKitRouteLocaleParameters::merge() accept an optional explicit $locale.

Changed

• Flash messages are stored translated (flash.translate, default true): AuthKit controllers translate their flash keys (magic_login.request.flash_sent, reset.*.flash_*, register.flash_rate_limited, social.error.*, …) from the NowoAuthKitBundle domain in the request locale before adding them, so host templates that print {{ message }} or {{ message|trans }} (and UiKitBundle's toast partial) show text instead of raw keys. Set flash.translate: false to keep raw keys.

Full Changelog: v1.22.4...v1.23.0