🚀 Features
- I18n plugin - by @himself65 in #7428 (30c27)
- Add
setShouldSkipSessionRefresh- by @himself65 in #7625 (ac81f) - Add
disableImplicitLinkingto accountLinking - by @Paola3stefania and @himself65 in #7270 (f11cd) - Mark
/forget-password/email-otpas deprecation - by @bytaesu in #7645 (97e6d) - Remove deprecated API - by @himself65 in #7623 (12517)
- db:
- Add verification identifier storage options - by @Paola3stefania in #7209 (0e8cd)
- device-authorization:
- Add user id checks - by @himself65 in #7632 (70e71)
- i18n:
- Type inference for error codes - by @himself65 in #7639 (b500a)
- one-tap:
- Add button mode for Google sign-in - by @himself65 and Alex Yang in #7482 (9dfbe)
- session:
- Add
deferSessionRefreshoption to support read-replica setups - by @Paola3stefania, Alexander Asomba, Bereket Engida and @himself65 in #6871 (36f55)
- Add
- sso:
- Support multi-domain providers - by @Paola3stefania in #7541 (75ee9)
- Add provider list and detail endpoints - by @Paola3stefania and @himself65 in #6967 (4f5c7)
- Add support for signed SAML AuthnRequests - by @Paola3stefania in #7562 (426f0)
🐞 Bug Fixes
- Centralize cookie parsing and handle Expires dates correctly - by @bytaesu, @cursoragent, taesu and @himself65 in #7556 (72069)
- Refresh
account_datacookie when session is refreshed - by @bytaesu and @himself65 in #7576 (96a7e) - Log error when misconfigured - by @himself65 in #7584 (10690)
- Remove duplicate secondary storage writes from setSessionCookie - by @bytaesu in #7592 (b2939)
- Set default logger level to "warn" - by @bytaesu, @cursoragent and taesu in #7597 (ba366)
- Respect the explicitly set
sendOnSignUpoption - by @bytaesu in #7593 (762a1) - Update google oauth endpoints - by @bytaesu in #7442 (27746)
- Consistent api version for facebook provider - by @bytaesu in #7445 (1f65d)
- Check jsconfig.json in getPathAliases - by @jycouet in #7650 (b7d50)
- 2fa:
- Server-side trust device expiration and configurable maxAge - by @Paola3stefania and @himself65 in #7644 (a7f15)
- cli:
- core:
- expo:
- Prevent null cookie key when redirect URL has no cookie param - by @bytaesu in #7555 (cf6c0)
- Prevent duplicate listener notifications in FocusManager and OnlineManager - by @kimchi-developer and @himself65 in #7552 (a5e40)
- github:
- Surface OAuth token exchange errors - by @Paola3stefania in #7186 (db6a4)
- mcp:
- Remove local mpc - by @Paola3stefania in #7574 (041dc)
- multi-session:
- Prevent duplicate cookies when same user signs in multiple times - by @Paola3stefania and @himself65 in #7256 (8e047)
- okta:
- organization:
- Filter
returned: falsefields from API responses - by @Paola3stefania and @himself65 in #7531 (87777)
- Filter
- session:
- Skip invalid sessions in list - by @Paola3stefania and @himself65 in #7182 (dedb4)
- stripe:
🏎 Performance
- Fix infinite typecheck - by @himself65 in #7563 (2ff99)