v4.14.0
·
113 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Breaking Changes:
-
require an
identity_resourcefor all OAuth2 and OIDC strategies by James Harton -
require an
identity_resourcefor all OAuth2 and OIDC strategies by James Harton
Features:
- confirm-to-link for untrusted OAuth2 email matches by James Harton
Bug Fixes:
-
thread tenant/actor through OAuth2 identity resolution by James Harton
-
resolve OAuth2/OIDC users by
iss/sub, never by email by James Harton
Improvements:
-
generated confirmation sender demonstrates identity-link copy by James Harton
-
trust
email_verifiedby default for Slack and Apple by James Harton