🚀 Features
- Additional fields on account - by @dvanmali in #4935 (bf0ac)
- Add support for custom callback for token url - by @acusti in #5027 (6bb94)
- captcha: Add support for CaptchaFox - by @tgrassl in #4944 (e03e5)
- cli: Add mcp client configs from
cli- by @Kinfe123 and @himself65 in #4872 (70cb4)
🐞 Bug Fixes
- Support compressed ipv6 format - by @Velka-DEV in #4982 (d8f11)
- Add required constraint to slug filed in org plugin - by @bytaesu in #4989 (0581a)
- Use consistent messaging on
requestPasswordReset- by @Eazash in #5014 (2f94b) - Cookie size limit shouldn't throw error - by @Bekacru and @himself65 in #5031 (72ecc)
- Handle symbols in proxy get trap to prevent TypeError - by @zbeyens and @himself65 in #4924 (8d46c)
- Ttl for rate limited secondary storage - by @dvanmali in #4961 (f246d)
- Properly encode callback url for email verificaiton - by @Bekacru in #5052 (41d2e)
- Session update database hook should expect partial session type - by @Bekacru in #5056 (ade06)
- Deprecate
options.advanced.generateIdtype - by @himself65 (48249) - Api keys should properly check if a request is from client or server - by @Bekacru (2e236)
- Refactor account deletion functions to trigger database hooks - by @xuchenhao001 in #5114 (dade3)
- Improve username transformation logic - by @ping-maxwell in #5115 (b2a9e)
- adapter:
- Use updated field values in WHERE clause during update - by @QuintenStr and @ping-maxwell in #5004 (c8f47)
- Foreign keys that are nullable on number ids can return string of
null- by @ping-maxwell in #5036 (68608) - Ensure transaction function is implemented in the adapter - by @himself65 in #5046 (246a2)
- api-key:
- Correct refill interval time calculation - by @Pankaj3112 and @himself65 in #4871 (e2c3c)
- Shouldn't issue api key a mock session by default - by @Bekacru (e9342)
- client:
- Add lynx client exports - by @JagritGumber in #4950 (f556b)
- custom-session:
- device-authorization:
- last-login-method:
- Custom resolver method default logic - by @ThibautCuchet in #4821 (778bf)
- oauth-proxy:
- oidc:
- Properly enforce consent requirements per OIDC spec - by @himself65 in #4974 (c471c)
- org:
- Update type to include undefined - by @himself65 in #5003 (61b44)
- sso:
- Safe json parsing for saml/oidc configs - by @natetewelde and @himself65 in #4858 (d330a)
- Prevent duplicate SSO provider creation with same providerId - by @xiaoyu2er in #5033 (ddce2)
- OIDC scopes should fallback to provider scopes - by @Bekacru in #5071 (f34a9)
- stripe:
- Update with an existing subscription - by @himself65 in #4988 (4388d)
- Sync customer email on db change - by @himself65 in #4995 (b0ec2)
getCustomerCreateParamsnot actually being called - by @ebalo55 and @himself65 in #5019 (13872)- Throw error if event failed to be constructed - by @Bekacru in #5088 (47f8e)
- telemetry:
🏎 Performance
- Lazy load create telemetry - by @himself65 in #5007 (0385c)
- Lazy load create telemetry " - by @himself65 in #5007 (7f54b)