Skip to content

CHANGELOG.md

Latest commit

 

History

History
94 lines (49 loc) · 5.9 KB

CHANGELOG.md

File metadata and controls

94 lines (49 loc) · 5.9 KB
Raw

Changelog

0.5.0 (2026-11-01)

Added

  • first-party role guard, optional user and organization on User (171babb)
  • first-party role guard, optional user and organization on User (0c97616), closes #28

Fixed

  • skip the origin check for bearer-transport auth requests (ea1898d), closes #28
  • sync the bundled adapter manifest with API 0.21.1 (ede9798), closes #27
  • sync the bundled adapter manifest with API 0.21.1 and check it in CI (08a98d5)

0.4.0 (2026-11-01)

Added

  • verify-only resource server mode with audience, scope, role and step-up guards (f5b58bf)
  • verify-only resource server mode with audience, scope, role and step-up guards (8187925)

Fixed

  • Origin allowlist with Sec-Fetch-Site, and verify the cookie's inner access token (2e52141)
  • Origin allowlist with Sec-Fetch-Site, and verify the cookie's inner access token (46af635), closes #15

Documentation

  • show unsubscribe headers from your own sender and the invite's signInUrl (1d5087f)
  • show unsubscribe headers from your own sender and the invite's signInUrl (1aa4db4)

0.3.0 (2026-10-25)

Added

  • deliver account recovery notices and serve the v0.20 recovery routes (9ebf903), closes #13
  • refuse recovery sessions in the guard and refresh after enrollment (94e381d)
  • v0.20 recovery sessions, account notice delivery and console headers (8247e20)

Fixed

  • cancel a recovery request when no owner notice is delivered (15d0fdf), closes #13
  • console: keep the API's framing and sniffing headers on the console proxy (2ab4430), closes #12
  • refuse known placeholder secrets at startup (731a719)

Documentation

  • link the governance document and license pledge (3478bcf)
  • link the governance document and license pledge (44fe697)

0.2.2 (2026-10-18)

Fixed

  • forward the pre-auth token on magic link verify and serve the confirm route (#8) (5994d28)

0.2.1 (2026-10-13)

Documentation

  • name the app-side service token SEAMLESS_SERVICE_TOKEN (8872754)
  • name the app-side service token SEAMLESS_SERVICE_TOKEN (034b7fa)

0.2.0 (2026-10-08)

Added

  • serve the admin console from FastAPI and Django (2f522be)
  • serve the admin console from FastAPI and Django (b2acdee)

0.1.0 (2026-10-08)

Added

  • Seamless Auth server adapter for FastAPI and Django (1f3fab7)

Changelog

All notable changes to this project are documented in this file. The release automation (release-please) writes each entry from the Conventional Commits it releases.