Breaking changes
- Node.js 24 or later is necessary (
engines.nodeis>=24). otplib 13 has ESM-only dependencies, and the CommonJS build loads them withrequire(). otplibchanges from 12 to 13. For the same shared secret, the TOTP code is the same.- With two-factor authentication active, an empty or malformed shared secret now makes
login()reject with anError.login()then sends noaccount.unlockrequest. Version 3 sent the request and returned the error response of the API. Anullsecret still makeslogin()reject with a string.
The public API does not change.
What's Changed
- feat!: upgrade otplib to 13 and require Node 24 by @ab7z in #38
- Bump the dev-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #41
Full Changelog: v3.3.1...v4.0.0