Release v1.6.1 · xraph/authsome

Changes

chore(release): prepare Flutter packages for 1.6.1 (#44) (9099f34)
fix(release): publish Flutter packages via pub.dev automated publishing (#42) (7c08603)
Merge pull request #40 from xraph/security-hardening-and-store-conformance (ad9256f)
refactor(middleware): return typed errors instead of hand-written envelopes (466c583)
chore(ui): add eslint to the workspace, and bound the refresh retry it found (bdacdeb)
fix(ui): default tokens to memory, and bound wildcard path matching (c76c599)
fix(ui): fail closed when a session cannot be validated (7d741cf)
fix(ui): derive session expiry from the server, and let the server read stored sessions (01ea416)
chore: gitignore .claude workspace (a95aa5d)
fix: propagate plugin init failures, honour per-method session TTLs, harden IP and single-use (350973a)
fix(mfa): require step-up to disable, accept recovery codes, cap ticket attempts (2f5d320)
fix(oauth2): bind codes to client, redirect_uri, scope, and PKCE (970ff61)
fix(plugins): close magic-link token confusion and phone OTP brute-force (8db7bba)
fix(ui/nextjs): forward client identity and harden proxy responses (74c6d9e)
fix(ui): validate post-auth redirect targets (526cd3d)
fix(plugins): require auth on plugin admin and management routes (d787dfd)

Go:

go get github.com/xraph/authsome@v1.6.1

npm:

npm install @authsome/client@1.6.1
npm install @authsome/ui-react@1.6.1

Flutter:

dependencies:
  authsome_flutter: ^1.6.1

security: harden plugin auth surface and frontend SDKs by @juicycleff in #40
fix(release): publish Flutter packages via pub.dev automated publishing by @juicycleff in #42
chore(release): prepare Flutter packages for 1.6.1 by @juicycleff in #44

Full Changelog: v1.6.0...v1.6.1