v8.44.1

8.44.1 (2026-10-26)

Bug Fixes

• passport: enforce the declared protocol on @authorize() routes (da6a4c0)
• passport: record the session protocol once Passport.js has updated the session (12da24c)
• passport: record the session protocol when the login ends with a redirect (103d64d)
• passport: require a persisted login session for the session rules (f05e7f6)