🚀 Features
- MapProfileToUser in vk social-provider - by @MagicFun1241 in #1944 (8d357)
- One-time token plugin - by @Bekacru in #2151 (155d9)
createAdapteranduseNumberId- by @ping-maxwell in #1926 (98661)- Support user data mapping in id token social sign-in - by @Bekacru (a4267)
- Update hover style for light mode in community page - by @sudoskys (8955d)
- Zoom social provider - by @nktnet1 in #1671 (4590b)
- (captcha plugin) adding support for Google ReCAPTCHA v3 and hCaptcha - by @0scrm in #1836 (bf281)
- Openapi spec update - by @solarsoft0 in #1699 (27b40)
- Have-i-been-pwned plugin - by @moshetanzer in #1978 (99ffa)
- Support custom issuer totp - by @Siumauricio in #2113 (b2660)
- Delete token expiry configuration - by @Bekacru in #2138 (3b659)
- Add option to disable session refresh on use - by @Bekacru in #2126 (9e951)
- admin:
- Add support for passing multiple roles as array - by @Netrifier in #1907 (df727)
- email-otp:
- facebook:
- generic-oauth:
- Added field discoveryHeaders to GenericOAuthConfig - by @RyanWSweeney in #2205 (c6d59)
- jwt:
- oauth2:
- organization:
- phone-number:
- provider:
- react-start:
- socialLink:
- Add support for custom scopes in social account linking - by @leoleducq in #2074 (c14f1)
- stripe:
- two-factor:
- username:
🐞 Bug Fixes
- Import orders and alias to avoid conflict in ac code examples - by @AmagiDDmxh (e0b34)
- Fallback to checking main db on session retrieval when storeSessionInDatabase is enabled - by @Bekacru (f0e8f)
- Export oAuth types - by @hyoban in #2028 (0b6a2)
- Og image compat - by @Kinfe123 (e2d6b)
- Og image compatibility on multiple link previews - by @Kinfe123 (a2174)
- Tooltip arrow - by @Kinfe123 (1c605)
- Tooltip arrow pointer - by @Kinfe123 (e62ea)
- Forget password flow failing because of id conversion - by @sosweetham in #2083 (75faf)
- Dep issue - by @Kinfe123 (4ff81)
- Deployment compat issue - by @Kinfe123 (3b6d8)
- Verify github email when profile has an email - by @erquhart in #2078 (fcb43)
- Docs syntax spacing - by @Kinfe123 (11166)
- GenericOAuth default redirectURI for account linking - by @dbworku in #2147 (d2453)
- Missing disableRefresh type in server side getSession - by @Bekacru in #2141 (fb431)
- Redirect to defaultErrorURL if errorURL doens't exist - by @Bekacru (6a089)
- Plugin middleware docs - by @Kinfe123 (bfdb2)
- Improve header value retrieval for IP address extraction - by @ozgurozalp in #1865 (cbbd6)
- Prisma client docs - by @Kinfe123 (f4a38)
- Community page interaction - by @Kinfe123 (ea465)
- Community page interaction - by @Kinfe123 (171fa)
- Hover style for light mode in community page - by @Kinfe123 (06d65)
- IpAddress and userAgent missing on server authentication - by @Bekacru in #2121 (a9274)
- Missing export one time token plugin - by @wadefletch in #2222 (b7c72)
- Delete from session table when stopImpersonate called - by @Kinfe123 in #2230 (3f4af)
- Filter out fields with
returned: falsefrom session cookie cache - by @Kinfe123 in #2232 (78f18) - Rethrow error from db hooks if it is APIError instances - by @Bekacru (45f43)
- admin:
- Pass where clause to adapter.count to fix total value on listUser - by @Netrifier in #2109 (38128)
- DefaultRoles, adminRoles + others not applying user config - by @ping-maxwell in #2128 (4dcb9)
- 'dontRememberMe' cookie handling during impersonation - by @Bekacru in #2236 (2249f)
- api-key:
- Return value of permissions should be object, not string - by @ping-maxwell in #1757 (f633d)
- Update rateLimitEnabled default to consider options - by @ismael-iskauskas in #1887 (b2def)
- apple:
- custom-session:
- generic-oauth:
- oauth:
- oauth-proxy:
- oidc-provider:
- open-api:
- Hide disabled paths - by @CrutchTheClutch in #2144 (f257f)
- organization:
- Update default invitation expiration time to use seconds - by @Bekacru (834e3)
- Fix conditional teamId inference - by @Netrifier in #2133 (a6860)
- UpdateMemberRole failing if issuer has multiple roles - by @dustin-we in #2104 (72631)
- stripe:
- Allow customizing subscription schema - by @ping-maxwell in #2105 (10893)
- Throw err if passed
referenceIdwhen nosubscriptionauthorizeReference` is defined - by @ping-maxwell in #2129 (9efcd) - Update referenceId in checkout session to use client_reference_id instead of metadata - by @Bekacru (08130)
- two-factor:
- 2fa error codes failing to infer - by @ping-maxwell in #2102 (f7199)