This release introduces the new Hanko profile custom element and basic rate limiting.
Profile element
In addition to <hanko-auth>, hanko-elements now also contains <hanko-profile>, a profile page that can be integrated into your app and fully customized with CSS. The profile supports email and credential management, allowing your users to change their email address, their password (if enabled), and manage their passkeys.
Our quickstart app utilizes the new profile page, so you can check it out there. We'd love to hear your thoughts.
Note: The import path for the elements package has been changed. See elements readme for more information. To use <hanko-profile>, you need the latest version of the hanko-elements package (v0.1.0-alpha).
Rate limiting
This version also introduces basic rate limiting to hanko to protect endpoints from scripted / DoS attacks. The rate limiter supports both in-memory and Redis configurations and uses a combination of user ID and IP address.
What's changed
- docs: add a simple guide for mobile by @FreddyDevelop in #458
- feat: add database url config variable by @FreddyDevelop in #487
- feat: add query parameter for searching audit logs by @FreddyDevelop in #490
- feat: introduce hanko profile element and related api changes by @bjoern-m in #495
- Feat basic rate limiting by @like-a-bause in #501
- chore: update echo and switch the deprecated jwt middleware with echo… by @like-a-bause in #507
- fix: fix button width by @bjoern-m in #508
- fix: adjust the invalid WebAuthn credential error message by @bjoern-m in #463
- fix: frontend dockerfiles by @lfleischmann in #509
- fix: add 'emails' section to Config.md by @bjoern-m in #523
- feat: add query params to search users by @FreddyDevelop in #522
Full Changelog: v0.3.2...v0.4.0