Breaking changes
- SameSite=Strict Cookies: We changed the configuration of cookies so that they are
SameSite=Strict
.
For more information on how to configure custom domains correctly - visit our documentation. - Naming alignments: We aligned our naming in multiple places to be snake-case instead of camel-case, along with parameter naming alignment. These changes include:
loginOptions
>login_options
refreshToken
>refresh_token
DeliveryMethod.PHONE
>DeliveryMethod.SMS
Enhancements
- JWT returns in
validate_session
: Thevalidate_session
function will now return the parsed JWT response. - Upgraded SSO configuration options: We upgraded SSO management function, so that they now support configuring the
domain
parameter, which is used for auto registering new users to a specific tenant, if their identifiers are from the defined domain.
Bug fixes
- Logic fix in
validate_and_refresh_session
function: A fix to allow either and not both actions in method was applied.