AllAuth React SDK 1.4.5: isolated application support

Opt-in application-initiated support can run on a separate application hostname while ordinary administrator tabs retain their sign-in. The proxy preserves safe native actor/session context and validates the exact application return destination. Existing console support, cookies, signed transport and sign-in remain compatible.

• Add the exact applicationReturnUrl to the support proxy options when enabling application-initiated support on an isolated hostname. The matching service must explicitly enable delegation and register the separate callback.
• Safe actor kind/session, application audit ID and context are preserved through support status. Native session credentials remain in HttpOnly cookies, and support cleanup returns only the configured main-app administrator destination.
• The host must enforce its own current administrator/context checks on business and native proxy requests, block ordinary auth/admin flows on the support hostname and restrict native writes there to support-stop. Existing integrations remain disabled until explicitly configured; no customer upgrade or credential change is automatic.

This is a new SDK publication. GitHub release metadata records its exact publication time.

Exact SDK source · Public release record

SHA-256: 63c5fc7cdf264f92f065d800ef0b6ea53650ccb5f5d3232ac1ff6633d6e5c397