🚀 Features
- Add
ctx.isTrustedDomainhelper - by @jonathansamines in #6462 (197e8) - Drizzle pg supports JSON - by @dvanmali in #6518 (59b61)
- Add Refresh Token Support to Kick OAuth Provider - by @CesarRodrigu in #6263 (e9543)
- admin: Prevent impersonating admins by default [breaking] - by @jslno and @Bekacru in #6454 (9d452)
- expo: Last-login-method client plugin - by @jslno and @himself65 in #6413 (b7d32)
- multi-session: Allow to infer additional fields - by @jslno in #6585 (812a6)
- organization: Allow invited users to see organization name - by @GautamBytes and Copilot in #6602 (cda99)
- sso: Use domain verified flag to trust providers automatically - by @Paola3stefania (312fc)
🐞 Bug Fixes
- Avoid throwing on client side - by @landoncolburn and @Bekacru in #6361 (bd987)
- Export organization plugin types - by @pffigueiredo in #6490 (630c5)
- Prematurely deleting active sessions in secondary storage - by @DevDuki in #3885 (7d0a6)
- Pathname should be normalized when basePath is set to root - by @Bekacru (126e4)
- Make sure non-chunked session data cookie is cleared - by @Bekacru (aa2fb)
- Array field handling across adapters and schema generation - by @ping-maxwell and @Bekacru in #6601 (6494d)
- StoreStateStrategy default to database if provided - by @himself65 in #6619 (49c6b)
- Should always remove 2FA verification token after successful verification - by @delfortrie in #6604 (c47b5)
- adapter:
- Add logger creation in adapter factory - by @ping-maxwell in #6597 (99b4f)
- Allow run internal adapter outside context - by @himself65 in #6617 (adb75)
- admin:
- cli:
secretgenerates empty - by @himself65 in #6504 (0ca6d)- Deduplicate drizzle schema relationships - by @ping-maxwell in #6547 (a501b)
- core:
- Allow returning null in getUserInfo in provider options - by @Zollerboy1 in #6528 (d4957)
- db:
- Correctly unwrap validator result in schema parsing - by @GautamBytes in #6488 (89030)
- deps:
- kysely:
- magic-link:
- Handle query params in errorCallbackUrl - by @martinriviere in #6383 (69b88)
- oidc:
- Compatibility with exact-optional-property - by @ping-maxwell in #6502 (51e46)
- openapi:
- Mark /get-session response as nullable - by @GautamBytes in #6540 (be00f)
- prisma:
- saml:
- Enforce trusted provider check - by @Paola3stefania in #6551 (816f1)
- sso:
- Safely parse provider configs on registration - by @Paola3stefania and @Bekacru in #6550 (cfafc)
- username: