Skip to content

chore: update version and changelog - #560

Merged
Bccorb merged 1 commit into
mainfrom
changeset-release/main
Nov 2, 2026
Merged

Bccorb merged 1 commit into
mainfrom
changeset-release/main

Conversation

@github-actions

@github-actions github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

seamless-auth-api@0.22.0

Minor Changes

  • ffa34ca: The API now owns which sessions a provider sign-in was made on. The provider service binds a session to a client with POST /oidc/sessions/:id/bind, presenting the user's own access token for that session, and the API answers account and auth context lookups, signs provider tokens, and accepts a session revoke only for bound sessions. Account notices need the same binding. Device-flow tokens no longer carry amr or auth_time, as they already did not carry acr.

    This raises the provider service contract to version 3, so seamless-auth-oidc-provider must be upgraded with the API. Sessions signed in to provider clients before the upgrade need to sign in again to get new provider tokens.

@Bccorb
Bccorb merged commit 1e38805 into main Nov 2, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant