What's Changed
- fix(magic-link): refuse a cross-origin sign-in before the link is spent by @johnnyhuirilef in #59
- docs: add a security policy by @kamilmysliwiec in #61
- feat(oidc): accept a function of the name as providers by @kamilmysliwiec in #52
- fix(account): give a link back when a step after its consume fails by @kamilmysliwiec in #63
- test(mfa): stop TOTP codes from crossing a step mid-request by @kamilmysliwiec in #62
Full Changelog: 0.1.1...0.1.2