0.3.3

nuxt-auth is an authentication package for Nuxt 3. It provides oauth sign-in, credential sign-in and magic-email sign-in flows. Read more: https://sidebase.io/nuxt-auth/getting-started.

This is release 0.3.3:

• there are no breaking changes in this release,
• there is one fixed CVE in this release

To use the new version:

npm i -D @sidebase/nuxt-auth@0.3.3

What's changed

There's a number of new features, fixes and docs-updates as well as one security-update.

🚀 Enhancements

• feat: make origin configurable at runtime by @BracketJohn in #140
• feat: do not protect 404 pages by default, add config option for this #136
• feat: unify and shorten all error messages #136
• ci: add smoketest to start playground and curl from it by @BracketJohn in #137
• docs: be clearer that catch-all name must be catch-all by @BracketJohn in #141
• docs: add a "error and warnings" page to document error codes & resolutions https://sidebase.io/nuxt-auth/ressources/errors #140

🩹 Fixes & Chores

• origin is correctly inferred and warning for it missing is correctly displayed #136
• resolve "nuxt instance undefined" by not using an async composables in auth middleware by @BracketJohn in #136
• resolve ERR_HTTP_HEADERS_SENT by @BracketJohn in #136
• attempt lazy auth-handler setup if getServerSession is called befor any auth endpoint @BracketJohn in #125
• chore: bump eslint and ufo by @BracketJohn in #126
• fix(middleware): redirect to signIn without using location.replace by @JoaoPedroAS51 in #127
• chore: update deps nuxt/kit and defu by @BracketJohn in #138
• provide type for disabling global auth middleware by @BracketJohn in #139
• chore(deps-dev): bump eslint from 8.30.0 to 8.31.0 by @dependabot in #146
• Release 0.3.3 by @BracketJohn in #147

🔒 Security

• resolve CVE-2022-46175 by @BracketJohn in #142
  • parse5 problem of the sub-dep @nuxt/kit
  • no impact on module-users: was only used in an internal build-step, not during production

All Commits

• Improve auth handler setup by @BracketJohn in #125
• chore: bump eslint and ufo by @BracketJohn in #126
• fix(middleware): redirect to signIn without using location.replace by @JoaoPedroAS51 in #127
• ci: add smoketest to start playground and curl from it by @BracketJohn in #137
• chore: update deps nuxt/kit and defu by @BracketJohn in #138
• feat: provide type for disabling global auth middleware by @BracketJohn in #139
• fix: do not use async composables in auth middleware by @BracketJohn in #136
• feat: make origin configurable at runtime by @BracketJohn in #140
• docs: be clearer that catch-all name must be catch-all by @BracketJohn in #141
• security: resolve CVE-2022-46175 by @BracketJohn in #142
• chore(deps-dev): bump eslint from 8.30.0 to 8.31.0 by @dependabot in #146
• Release 0.3.3 by @BracketJohn in #147

New Contributors

• @dependabot made their first contribution in #146

Full Changelog: 0.3.2...0.3.3