What's new:
- 🔐 A new set of blocking events is introduced
authentication.pre_initialize
,authentication.post_identified
,authentication.pre_authenticated
:- Allows users to add logic to block users login/signup based on an array of signals, such as email, roles, date/time, GeoIP.
- Beyond simple allow/block, you can also prompt CAPTCHA, trigger 2FA, or rate-limit specific users.
- See common use cases in: https://docs.authgear.com/customization/events-hooks/examples-common-use-cases
- ✨ Support "Do not ask again" in passkey upsell screen
- ✨ Add a cancel button to bot protection dialog
- 🔐 Allow creating passwords in the portal when the user has no password
- ✨ Hide deprecated "Post Login URIs" in application settings
- 🐞 Other misc bug fixes