v0.74.56
Changelog
🐛 Bug Fixes
- csrf: seed the cookie on pages and API answers, not static files (d43c1b6) (by Chris chris@stacksjs.com)
- auth: preserve two-factor challenges on failed replacement (d160883) (by glennmichael123 gtorregosa@gmail.com)
- auth: preserve passkey challenges on failed replacement (10da3a7) (by glennmichael123 gtorregosa@gmail.com)
- auth: bind two-factor disable to verified credentials (7f794f0) (by glennmichael123 gtorregosa@gmail.com)
- auth: verify persisted two-factor state changes (424636c) (by glennmichael123 gtorregosa@gmail.com)
- auth: serialize password reset replacement claims (a3c62d8) (by glennmichael123 gtorregosa@gmail.com)
- auth: preserve schemes in emailed authentication links (fd27cca) (by glennmichael123 gtorregosa@gmail.com)
- auth: verify persisted session issuance (097ef6d) (by glennmichael123 gtorregosa@gmail.com)
- auth: replace pending two-factor setup atomically (cbd5ef9) (by glennmichael123 gtorregosa@gmail.com)
- ci: align Pantry with the required Craft version (9c929b9) (by glennmichael123 gtorregosa@gmail.com)
- auth: accept sessions in exported middleware (07cdd05) (by glennmichael123 gtorregosa@gmail.com)
- auth: resolve session identity on public routes (9a954c9) (by glennmichael123 gtorregosa@gmail.com)
- auth: commit magic links before delivery (b0322bc) (by glennmichael123 gtorregosa@gmail.com)
- auth: expire partial in-memory login counters (47dd1b6) (by glennmichael123 gtorregosa@gmail.com)
- auth: preserve session renewal claim boundaries (d6c3c5d) (by glennmichael123 gtorregosa@gmail.com)
- auth: reject incomplete session revocation (6d4ada1) (by glennmichael123 gtorregosa@gmail.com)
⚡ Performance Improvements
- auth: amortize in-memory limiter cleanup scans (fb997c0) (by glennmichael123 gtorregosa@gmail.com)
✅ Tests
- auth: stabilize PostgreSQL replica routing setup (e34d1bf) (by glennmichael123 gtorregosa@gmail.com)
🔧 Chores
- release v0.74.56 (81cbeba) (by Chris chris@stacksjs.com)
Contributors
- Chris chris@stacksjs.com
- glennmichael123 gtorregosa@gmail.com