v1.5.0 Stable

What's Changed

• feature/admin session management by @chintakjoshi in #232

Full Changelog: v1.4.5...v1.5.0

v1.4.5 Stable

What's Changed

• fix/saml identify will no longer attach on exisiting user by @chintakjoshi in #228
• fix/OTPs now use keyed HMAC-SHAA256 instead of SHA-256 by @chintakjoshi in #229
• fix/mixed authorization bearer now rejectes it with 400 by @chintakjoshi in #230
• auth/tighten identity linking, OTP/CSRF security, async auth performance by @chintakjoshi in #231

Full Changelog: v1.4.4...v1.4.5

v1.4.4 Stable

What's Changed

• fix/created an independent service for jwt generation by @chintakjoshi in #219
• fix/threading the cookie lifetimes by @chintakjoshi in #220
• fix/making compatibility path atomic by @chintakjoshi in #221
• test/added test to verify shutdown behaviour by @chintakjoshi in #222
• fix/OAuth login now stores the requested downstream audience plus red… by @chintakjoshi in #223
• feature/added password validation and 60s cooldown by @chintakjoshi in #224

Full Changelog: v1.4.3...v1.4.4

v1.4.3 Stable

What's Changed

• fix/added deferred audit dispatch by @chintakjoshi in #214
• fix/added tests to cover db lookup for session refresh tokens by @chintakjoshi in #215
• fix/added regression test for email gdrp by @chintakjoshi in #216
• Bug/error code by @chintakjoshi in #217
• fix/introduced internal_server_error as a valid contract code by @chintakjoshi in #218

Full Changelog: v1.4.2...v1.4.3

v1.4.2 Stable

What's Changed

• fix/introduced a thread-safe ServiceRegistry centralized singleton cache by @chintakjoshi in #184
• fix/introduced a keyed RefreshTokenHasher by @chintakjoshi in #186
• fix/centralizing anchor rendering in html link message by @chintakjoshi in #187
• fix/added pool size, overflow, timeout and recycle configs by @chintakjoshi in #189
• fix/changed rate limit to pure ASGI middleware by @chintakjoshi in #191
• Bug/nouser ratelimit by @chintakjoshi in #193
• fix/caching the inspected para names by @chintakjoshi in #195
• fix/created shared reloadable singleton for get_user_service by @chintakjoshi in #202

Full Changelog: v1.4.1...v1.4.2

v1.4.1 Stable

What's Changed

• fix/security headers now adds cache-control and pragma by @chintakjoshi in #175
• Dev by @chintakjoshi in #176
• fix/429 responses from RL include retry-after by @chintakjoshi in #177
• fix/added email-validator by @chintakjoshi in #178

Full Changelog: v1.4.0...v1.4.1

v1.4.0 Stable

What's Changed

• fix/added a flag to swagger /docs by @chintakjoshi in #163
• CI now fans out across multiple GitHub Actions jobs by @chintakjoshi in #165
• migrate/python-jose to authlib by @chintakjoshi in #167

Full Changelog: v1.3.1...v1.4.0

v1.3.1 Stable

What's Changed

• fix/adding configs for hostnames for local and prod environments by @chintakjoshi in #150

Full Changelog: v1.3.0...v1.3.1

v1.3.0 Stable

What's Changed

• Feature/httponly by @chintakjoshi in #148

Full Changelog: v1.2.1...v1.3.0

v1.2.1 Stable

What's Changed

• fix/fixing webhook SSRF, API keys, and OAuth/SAML login by @chintakjoshi in #143
• docker compose by @chintakjoshi in #146

Full Changelog: v1.2.0...v1.2.1