Bereket Engida
ddebd0358d
chore: release v1.1.20
2025-02-24 14:54:02 +03:00
Bereket Engida
da62e635be
fix(session): include expiresAt in session data for HMAC verification
2025-02-24 12:38:25 +03:00
Bereket Engida
1fadaeecfa
chore: release v1.1.20-beta.5
2025-02-24 12:28:59 +03:00
Bereket Engida
790a942933
chore: release v1.1.20-beta.4
2025-02-24 12:28:55 +03:00
Bereket Engida
795ff4269a
test(origin-check): add test for callback URL with double slashes
2025-02-24 12:28:55 +03:00
Bereket Engida
24659aefc3
fix(origin-check): prevent URLs with double slashes from being trusted
2025-02-24 12:28:55 +03:00
Bereket Engida
d9c57e1f56
fix(origin-check): exclude URLs with double slashes
2025-02-24 12:28:55 +03:00
Zohaib Akber
84dc11bb3e
docs(fix): session secondary storage value for redis ( #1359 )
2025-02-24 08:10:11 +03:00
Bereket Engida
3009797045
chore(docs): fix syntax error on code example
2025-02-24 08:09:44 +03:00
Wolfgang Rathgeb
8ba7a9ceae
feat(email-otp): add option to set a function to generate OTPs ( #1472 )
...
* add option to create a otp
* add description
* use tabs instead of spaces
* rename create to generate and replace all uses fo generateRandomString
* remove length
* fix type in forgot-password
* add generateOTP option and tests for email OTP functionality
---------
Co-authored-by: Bereket Engida <bekacru@gmail.com >
2025-02-24 08:02:04 +03:00
Jan
5a537c5408
docs: added missing column in 2fa plugin schema ( #1552 )
...
* Added missing column in 2fa plugin schema documentation
* Formatting
2025-02-24 00:34:29 +03:00
Kamil Kisiela
6c67ea1112
feat(sso): sign in using the providerId ( #1533 )
2025-02-24 00:13:01 +03:00
Bereket Engida
f822f0a246
chore: release v1.1.20-beta.3
2025-02-23 23:43:00 +03:00
Bereket Engida
6440a1074d
fix(one-tap): remove random string generator for nonce to fix expo client
2025-02-23 23:42:52 +03:00
Bereket Engida
12ed731b6c
chore: release v1.1.20-beta.2
2025-02-23 12:41:39 +03:00
Bereket Engida
ac848bb9f4
fix(one-tap): update import path for generateRandomString to fix unsupported crypto import for react native
2025-02-23 12:41:26 +03:00
Maxwell
e7b2d8177d
docs(fix); sessionMiddleware import path in plugins docs ( #1544 )
...
Thanks @perkinsjr !
2025-02-23 08:46:47 +03:00
Hussein Raji
450c42680e
docs: fix correct "set password" code snippet ( #1537 )
2025-02-22 20:10:17 +03:00
Maxwell
97911b4da1
docs(rename): node to express in integration docs ( #1535 )
2025-02-22 20:09:45 +03:00
Hussein Raji
7230ca9069
docs: fix typo ( #1529 )
2025-02-22 00:45:07 +03:00
Rahul Mishra
66e313cc7a
chore: fix cjs export for oauth-proxy plugin ( #1530 )
2025-02-22 00:44:21 +03:00
SaltyAom
eba3fc919f
doc(elysia): using mount and macro to simplify code ( #1531 )
2025-02-21 21:18:11 +03:00
Bereket Engida
316e717543
chore: release v1.1.20-beta.1
2025-02-21 17:07:35 +03:00
Bereket Engida
9653f44a0f
fix: add callback URL to update email verification link
2025-02-21 17:06:40 +03:00
Bereket Engida
3ca6c4276f
fix: add email verification for in place email updates
2025-02-21 16:58:52 +03:00
Rahul Mishra
755582b77c
chore: cache turbo output to speed up CI ( #1526 )
2025-02-21 15:43:43 +03:00
Bereket Engida
5d529f0189
docs(landing): add testimonial from Theo
2025-02-21 12:00:21 +03:00
Bereket Engida
0208d09012
docs(landing): update testimonials
2025-02-21 11:52:47 +03:00
Bereket Engida
5e4b8ef0df
docs(landing): update testimonials
2025-02-21 11:31:36 +03:00
Bereket Engida
745c9f35b4
docs: update testimonials
2025-02-21 11:28:17 +03:00
Bereket Engida
c3168d0dc0
docs(landing): update avatar image for testimonial
2025-02-21 11:09:59 +03:00
Bereket Engida
28cc66bff7
fix(organizaiton): restrict admins from removing or updating owners or members with creator roles ( #1520 )
2025-02-21 02:15:51 +03:00
Bereket Engida
d26e600c66
chore: release v1.1.19
2025-02-21 00:58:23 +03:00
Bereket Engida
848b47f567
chore:lint
2025-02-20 23:27:17 +03:00
Ben King
5f6cbe9478
fix(email-otp): don’t save email address as user name ( #1519 )
...
Co-authored-by: benkingcode <ben@lionfeet.com >
2025-02-20 23:17:12 +03:00
Pratiyank Kumar
9b02e0aae2
demo: fix React prop spreading warnings in CodeEditor component ( #1321 )
2025-02-20 22:43:34 +03:00
josselinonduty
a50950d487
docs: fix headers api example for nitro ( #1307 )
2025-02-20 22:38:35 +03:00
Thomas Lekanger
b9c01f3c49
docs: fix typo ( #1517 )
...
genericOAuth plugin uses ``scopes`` not ``scope``
2025-02-20 22:35:07 +03:00
Bereket Engida
35e300b005
refactor: add overrideAll option for create session
2025-02-20 22:30:08 +03:00
Gordon Ta
6c28ad3e9b
docs: improve cross subdomain cookies docs ( #1324 )
...
docs/concepts/cookies:
- updated the `Cross Subdomain Cookies` section with missing details and additional information to make subdomain cookies work
docs/reference/security:
- updated the `Cookies` section with corrected attribute and option names
2025-02-20 22:02:32 +03:00
Adam El Taha
b56f6da8e2
docs: remove unneeded import from JWT docs ( #1344 )
2025-02-20 21:59:25 +03:00
Bereket Engida
4d324f433d
chore: lint
2025-02-20 21:58:56 +03:00
Arda Soyturk
b9ccfff628
feat(cli): add support for auth.server.ts ( #1456 )
2025-02-20 21:54:22 +03:00
KinfeMichael Tariku
954b1dcb74
fix(admin): unban should reset expiration date and reason ( #1469 )
2025-02-20 21:53:45 +03:00
Thiago Felix
e51332022a
fix(oauth): set tokens on oauth account created during link ( #1462 )
2025-02-20 21:53:22 +03:00
KinfeMichael Tariku
072c597500
fix(admin): impersonate user session expiration ( #1471 )
...
* fix: impersonate user session expiration
* console leak
2025-02-20 21:52:26 +03:00
Alessandro Jean
9c3b5c377f
fix(generic-oauth): support allowDifferentEmails on Generic OAuth Plugin ( #1481 )
2025-02-20 21:51:55 +03:00
Hussein Raji
a718cf5b04
docs: fix typo ( #1514 )
...
Correct error handling example snippet for sign in without email verification
2025-02-20 21:51:18 +03:00
Gregor Wedlich
28f186c6d0
feat(two-factor): activate two factor with email OTP to avoid Insecure skipVerificationOnEnable ( #1445 )
...
* Revise Email and Password integration docs: improved clarity and added new examples
* Enable OTP activation after successful verification
- Remove pre-check for twoFactorEnabled in OTP verification endpoint.
- Update user record (twoFactorEnabled: true) after correct OTP submission.
- Refresh session with updated user data.
2025-02-20 20:50:36 +03:00
Bereket Engida
ba11b97dbd
chore: release v1.1.19-beta.3
2025-02-20 20:48:55 +03:00
