What's Changed
- NPM: Bump tailwindcss from 3.4.12 to 3.4.13 by @dependabot in #54
- Update @simplewebauthn/browser from 10.0.0 to 11.0.0
- Make the abstract
viewmethod in theProfileComponentlivewire class optional - Change the return type of
renderin the abstractProfileComponentlivewire class toView|string - Add new
RequiresSudotrait for filament actions that require authentication - Check if user actually has mfa enabled on their account when searching for mfa authentication options
- Ensure custom package svgs are loaded by blade icons
- Add new
RenderHookenum to reference package render hooks easier - Split
MfaOverviewlivewire component into multiple traits - Improve sudo mode checks during mfa app/webauthn key registration processes
- Make
userHasMfaEnabledonMfafacade public for more consistent checking if a given user has mfa enabled on their account - Use
Str::random(32)instead ofrandom_bytes(32)to generate webauthn challenges - Add
serializePublicKeyCredentialSourcemethod toWebauthnFacade to serialize webauthn key data for storage - Add
unserializeKeyDatamethod toWebauthnFacade to hydrate webauthn key data from storage - Generate random webauthn assertion public key credential request options object for invalid users instead of returning a 404 to prevent username enumeration
Breaking changes
- Drop Laravel 10.x support
- Require minimum Laravel 11.23 version
- Use filament's infolist section components instead of using the blade section component in certain livewire components, such as
ProfileInfo - Make the pending email a computed property (
pendingEmail) on theUserEmaillivewire component - Extract edit email action to a dedicated filament action class
- Extract delete user account action to a dedicated filament action class
- Extract dedicated action classes for mfa actions
- Move
SudoChallengeActionto theRawilk\ProfileFilament\Filament\Actions\Sudonamespace - Extract the markup for a pending user email change to a new view called
profile-filament::livewire.emails.pending-email-info - Rename
AuthenticatorAppeditpolicy method toupdate - Upgrade
web-auth/webauthn-libdependency tov5.0.1 - Remove
transportscolumn from webauthn model and migration - Change
attestationObjectFor,assertionObjectFor,passkeyAttestationObjectFormethod signatures onWebauthnfacade to accept a user model instead - Remove the
<x-profile-filament::component-section>blade component ProfileFilament::preferredMfaMethodForaccepts an array enums instead of strings for the$availableMethodsargument- Remove
MaskedEntryinfolist item andMaskedValuelivewire component
Removed the following views in favor of inline livewire components
- profile-filament::livewire.profile.profile-info
- profile-filament::livewire.emails.user-email
- profile-filament::livewire.delete-account
- profile-filament::livewire.update-password
- profile-filament::livewire.mfa-overview
- profile-filament::livewire.two-factor-authentication.authenticator-app-form
- profile-filament::livewire.two-factor-authentication.authenticator-app-list-item
- profile-filament::livewire.two-factor-authentication.recovery-codes
- profile-filament::livewire.two-factor-authentication.webauthn-keys
- profile-filament::livewire.two-factor-authentication.webauthn-key
- profile-filament::livewire.passkey-manager
- profile-filament::livewire.partials.passkey-list
- profile-filament::livewire.passkey
- profile-filament::livewire.partials.register-passkey
- profile-filament::livewire.sessions.session-manager
Full Changelog: v0.4.1...v0.5.0