Enhancements
- ReBAC support: Descope now supports an advanced and more elaborate concept of authorization, known as ReBAC. ReBAC, Relation-Based Access Control, allows defining the user's permissions based on its relationship to various objects, using a directed graph of connections between them. Read more in our README.
- Search users by email or phone: We enabled the option to search over the user email and phone attributes - regardless if those are used as Login IDs or not.
- Know if the user can authenticate using WebAuthn or Password: In the
userResponseobject, you can now check whether the user can authenticate using Passkeys (WebAuthn) or Passwords. - Search over tenants: Using the
searchAlltenants command, you can now search for all tenants based on their attribute values, such as name, self-provisioning domains, custom attributes and more. - Logout all user sessions: Descopers can now decide to terminate a specific user's sessions across existing devices, using the management SDK. You can do so by providing the user's Login ID (
LogoutUserByUserID) or their User ID (LogoutUser). - Batch invitations: Using the new
InviteBatchcommand, you can sent invitations to multiple users at once. - Cloning a project: Projects can be programmatically cloned using the new
cloneproject command. Note that this action is supported for pro and enterprise licensed customers. - Tenant selection: When a user has multiple associated tenants, it is important to know and control the context that they are currently in. For that, we've added the option to set the user's current tenant using the
SelectTenantWithRequestcommand. - README enhancements: Making our README more informative and full of examples for better explainability!