v1.7.1

This release addresses critical security vulnerabilities, improves OTP enforcement, and modernizes the codebase by removing legacy components.

🔒 Security

🛡️ Authentication Vulnerabilities

• Fixed OTP backup code replay vulnerability by preventing reuse of backup codes
• Fixed OTP bypass vulnerability in password change identity authentication
• Restored bearer-token fallback for password change identity verification

🐛 Fixes

🔑 Key Management

• Aligned JWKS tests with encrypted key flow runtime behavior
• Improved signJWT issuer claim handling with proper fallback coverage

🔐 Migration & Enforcement

• Preserved OTP enforcement during force_otp migration process

🧹 Improvements

📚 Documentation & Cleanup

• Removed legacy group surface and references from brochureware documentation
• Removed obsolete legacy groups scope description from user interface

🧪 Tests

✅ Coverage Enhancements

• Added comprehensive signJWT issuer fallback regression tests
• Updated test suite organization specification naming for clarity

Docker

docker pull ghcr.io/puzed/darkauth:v1.7.1