v2.9.1

2.9.1 (2022-10-05)

Bug Fixes

• add mfa migrations (#722) (afdb223)
• allow all URL forms in redirects (#711) (4ece9e3)
• load user after sign-up to pull data from triggers (#712) (e553477)
• lowercase emails (#714) (d65ba60)
• skip rate limit if header not present (#706) (8fb0c1e)
• update .yml to mfa (#731) (e034ca0)

v2.9.0

2.9.0 (2022-09-26)

Bug Fixes

• add swagger docs (#695) (8eefabb)
• add test for all sms providers (#676) (de6cd79)
• bypass captcha for certain routes (#693) (70a6070)

Features

• add opentelemetry tracer and metrics (#679) (650fa3b)

v2.8.0

2.8.0 (2022-09-13)

Bug Fixes

• Add full gosec support (w/o tests) (#636) (7994557)
• global logrus configuration (#575) (fee9bf3)
• handle null session id (#667) (0f36e91), closes #668
• releaserc (#680) (3f7f39e)
• Remove deprecation notice for admin roles (#639) (6e51f4b)
• return provider_refresh_token in query fragment (#641) (86ec668)
• use delete instead of truncate for fast tests (#654) (5115c5f)

Features

• use proper ip address (#649) (a691197)

v2.7.1

2.7.1 (2022-08-27)

Bug Fixes

• Access to req.Body via getBodyBytes (#630) (99fed86)
• add app_metadata in adminUserCreate (#628) (22aa3f6)
• add session_id to refresh_tokens table (#600) (f427b9f), closes #631
• skip capcha if admin jwt in header (#632) (4339913)

v2.7.0

2.7.0 (2022-08-23)

Bug Fixes

• add auth.jwt() function (#484) (e22cbc7)
• add configurable hcaptcha timeout (#441) (c353dbb)
• add email_change support to generateLink (#560) (7c452a8)
• add http timeout to add external provider requests (#471) (1685bf2)
• add IP Address to logs (df6bf87)
• add reuse interval for token refresh (#466) (6a6e3be)
• add tag prefix to semver (500fdc2)
• adds support for wildcards in redirect URIs (#334) (0f5091f)
• bubble up specific publicly accessible Postgres error messages (#404) (8ef6798)
• bump gotrue to v2.6.25 (#461) (a4af211)
• bump gotrue version (#518) (895644e)
• bump gotrue version (#557) (3d84070)
• change Discord's discriminator type to string (#457) (ca839e4)
• convert emails to lowercase before saving (#589) (545abbc)
• discord discriminator (#462) (b02f838)
• do not exclude updated_at (#473) (8689fd2)
• don't normalise mobile deeplinks (#591) (4042c80)
• generate signup link (#556) (e6e6c4d)
• go fmt -> gofmt (#522) (0177301)
• handle all non-2xx errors (#515) (067d039)
• increase size of ip address field (7568953)
• log auth actions (#479) (e01be0d)
• move config to releaserc (2408f1e)
• oauth: Remove password, phone on subsequent OAuth login (#509) (0d86833)
• Only require nonce in id_token when also passed in body (#430) (a67a77d)
• remove content length (de860d9)
• Revert URL normalization (#535, #591) (#592) (f9b28dd)
• shorten email otp (#446) (c64f331)
• shorten email otp length (#513) (397c949)
• simplify semantic release action (e2583cf)
• standardise logging format to use json (#562) (396646a)
• unique index should not apply to phone otps (#460) (60a7a6f)
• update auth.jwt function (#488) (0d5d599)
• update encoding (ba5eaf5)
• update generateLink response (#537) (b2696dd)
• update migration for creating partial indices (#463) (48d6554)
• validate email & phone number in shouldCreateUser (#448) (dd54189)

Features

• add captcha to verify and token endpoints (#520) (32a6e1f)
• add metadata to magic link (2529a5c)
• Mask user existence on /recover (#534) (0d30743)
• Normalize redirection URLs and globs (#535) (d6f4a2a)
• Remove conf.Configuration and getConfig(ctx) (#609) (9381b73)
• Remove globalConfig.MultiInstanceMode and dependents (#606) (df62340)
• Remove IsSuperAdmin (#625) (30eeb38)
• Remove remnants of getInstanceID(ctx) (#621) (be99cf2)
• Remove SAML external provider (deprecated) (#607) (55bc7c6)
• Remove system user (deprecated) (#610) (04dbd6f)
• update magiclink to include metadata (20500cd)