Skip to content

AAAX v0.5.0

Choose a tag to compare

@yky32 yky32 released this 20 Aug 16:47
· 42 commits to main since this release

Changelog

All notable changes to AAAX are documented here.

[0.6.0-SNAPSHOT] — unreleased

Development follows v0.5.0.

[0.5.0] — 2026-08-21

Highlights

  • UseCase application layer (no GodService)
  • Pluggable OTP/magic storememory (default) | redis
  • All loginsFinishAuthenticatedSession (password/OTP/magic/social/SAML/passkey)
  • Resource server example — Boot 4.1 JWT RS (examples/resource-server-boot4/)
  • Passkeys — webauthn4j registration + assertion verify; off by default (AAAX_PASSKEYS_ENABLED)
  • OSS tour: CODEMAP, mermaid Event Bus path, overnight A–D polish

Supported

  • OIDC AS, accounts, password, OTP, magic link, TOTP MFA, sessions
  • Identity Event Bus (log/audit/buffer/Kafka/webhook)
  • Hosted /sign-in /sign-up /user /admin
  • Google/GitHub social (opt), SAML SP (opt)
  • SMS dual-mode (Kafka | webhook)

Opt-in

  • Passkeys when aaax.passkeys.enabled=true (webauthn4j verified; RP/origin must match)
  • Redis OTP store when aaax.otp.store=redis

Out of 0.5

  • Multi-tenant orgs, SAML IdP, official React SDK, LDAP

[0.4.0] — 2026-08-20

Event Bus wedge + hosted experiences + Kafka notify example. See git tag v0.4.0.