0.1.0-alpha.1 (2026-09-16)
⚠ BREAKING CHANGES
- authling: limit Authling to identity provider (#2044)
Features
- appconfig: extract shared configuration loading (#1856) (732d7b2)
- auth: add CIMD-enabled development stack (#1881) (5e0f471)
- auth: add password-manager discovery (#2365) (cec4a0f)
- authling: add auditable password reset recovery (#2056) (5d1936f)
- authling: add browser session management (#2072) (cbf69db)
- authling: add CIMD-native OIDC provider (#1875) (a026593)
- authling: add durable account deletion and key erasure (#2382) (d5f395d)
- authling: add durable OIDC authorization grants (#2074) (1e5a016)
- authling: add local login and browser sessions (#1872) (65cf095)
- authling: add OIDC-authorized account data sync (#1886) (4953bf1)
- authling: add server-rendered web foundation (#1861) (12c8957)
- authling: add signed-in password change (#2059) (dab6594)
- authling: add standalone account runtime (#1842) (e563d68)
- authling: add verified email changes (#2058) (216a1f8)
- authling: add verified email signup (#1866) (30fef96)
- authling: incubate standalone identity provider (#1828) (93b4637)
- authling: redirect aliases to the canonical origin (#2362) (9a51f87)
- authling: rotate OIDC signing keys automatically (#2079) (8d305cd)
- authling: show signed-in account in site header (#2071) (aa87c47)
- authling: split verification codes into boxes (#2062) (0847b2f)
- auth: transfer Authling profiles to Chatto (#2076) (c91cac7)
- datacrypto: extract shared encryption primitives (#1853) (4235d7c)
- dev: replace Compose stack with Pitchfork (#2047) (41f4424)
- events: extract shared framework module (#1833) (3195ffd)
- natsruntime: extract embedded NATS lifecycle (#1845) (cb24279)
Bug Fixes
- authling: avoid caching failed JWKS responses (#2080) (fe1d6ca)
- authling: bound CIMD cache and lookup resources (#2378) (b9ac343)
- authling: bound request admission and complete OIDC browser flows (#2383) (562ba03)
- authling: disable 1Password for code inputs (#2077) (fff3e44)
- authling: disclose identity claims and encrypt grant metadata (#2376) (9d90430)
- authling: enforce OIDC authentication freshness (#2379) (5d279a8)
- authling: fence credential audit events (#2083) (19e7edc)
- authling: harden provider edge cases (#2082) (3ec6073)
- authling: preserve signup keys and bind session authority (#2373) (fc8b21e)
- authling: report runtime failures during startup (#2366) (b762bbe)
- authling: require password confirmation during signup (#2075) (7ac09c3)
- email: omit unnecessary SMTPUTF8 (#2273) (0595d00)