v0.35.0

Changes

• fix: add missing kid to JWT header @dbarrosop (#585)
• fix: update node deps due to vulns @dbarrosop (#583)
• feat: implement OTP over email @dbarrosop (#582)
• feat: allow configuring audience for idtoken validation and use fake provider for testing @dbarrosop (#581)
• feat: migrate /verify endpoint @dbarrosop (#579)
• feat: added support for RSA keys @dbarrosop (#578)
• feat: allow linking providers to existing users using an idtoken @dbarrosop (#577)
• feat: added /signin/idtoken @dbarrosop (#576)
• chore: bump nixbuild/nix-quick-install-action from 28 to 29 @dependabot (#575)
• chore: modify update dependencies schedule @github-actions (#574)

v0.34.1

Changes

• fix: make sure AUTH_DISABLE_NEW_USERS is respected when using oauth @dbarrosop (#573)
• chore: bump cachix/install-nix-action from 29 to 30 @dependabot (#572)
• [Scheduled] Update dependencies @github-actions (#571)
• chore: bump cachix/install-nix-action from V28 to 29 @dependabot (#570)

v0.34.0

Changes

• feat: added support for turnstile verification on signup @dbarrosop (#568)
• chore: update nixops @dbarrosop (#569)
• fix: change hasura health check url to make auth server work in gcp @itsmurugappan (#565)
• chore: bump cachix/install-nix-action from 27 to 28 @dependabot (#562)
• chore: bump DeterminateSystems/magic-nix-cache-action from 7 to 8 @dependabot (#561)
• chore: bump peter-evans/create-pull-request from 6 to 7 @dependabot (#560)
• [Scheduled] Update dependencies @github-actions (#557)
• fix: minor improvements to sliding window @dbarrosop (#556)
• feat: migrate /user/password to go @dbarrosop (#555)
• fix: correctly display error message when metadata migration fails @Tchoupinax (#551)
• chore: ci: a few more improvements @dbarrosop (#554)
• ci: improvements @dbarrosop (#553)

v0.33.0

Changes

• feat: implement rate-limiter @dbarrosop (#543)
• feat: improve email templates @onehassan (#548)
• chore: override versions for axios and ws to fix vulnerabilities @onehassan (#549)
• fix: Forward OAuth error to the client @fmanzali (#541)
• fix: restrict display name to avoid urls, spam, html tags, etc. @dbarrosop (#545)
• fix: set password limit to 50 to avoid reaching bcrypt limit of 72 bytes @dbarrosop (#544)
• [Scheduled] Update dependencies @github-actions (#538)
• chore: increase github actions timeout @dbarrosop (#546)
• chore: nodejs: remove migrated endpoints @dbarrosop (#537)

v0.33.0-beta6

asd

v0.32.1

Changes

• fix: nodejs: remove helmet @dbarrosop (#535)
• chore: bump actions/checkout from 2 to 4 @dependabot (#530)

v0.32.0

Changes

• fix: remove email from required fields as some users may not have one @dbarrosop (#529)
• chore: update nixops and allow running CI with secrets for contributors @dbarrosop (#528)
• feat: Add date to email headers in Send function @blib (#527)
• [Scheduled] Update dependencies @github-actions (#524)

v0.31.0

Changes

• feat: allow using a different connection string for migrations @dbarrosop (#521)

v0.31.0-beta0

asd

v0.30.0

Changes

• feat: allow deep links in redirectTo validation @onehassan (#513)