Release 0.9.1

0.9.1 (2022-06-14)

Bug Fixes

• add displayName, email, and newEmail variables to all email templates (d2235e9)
• do not actually follow redirection when redirectTo is invalid (7d24e55)
• workaround for outlook safelinks: add HEAD operation to the /verify route (1f12a53), closes #189# 0.9.0 (2022-06-02)

Release 0.9.0

0.9.0 (2022-06-02)

Bug Fixes

• validate phone number and transform them in the international format (#180).

Features

• allow any redirectTo when no AUTH_CLIENT_URL is set (#167).

Release 0.8.1

0.8.1 (2022-06-01)

Bug Fixes

• Able to use both phone number and messaging service id as from
  This way users can use both a simple phone number without setting up a Twilio messaging service or use a messaging service from Twilio (doc).

Release 0.8.0

0.8.0 (2022-05-24)

Bug Fixes

• token: reuse and update expiration date of a valid refresh token instead of invalidating it and creating a new one (7583997), closes #65
• check locales are not more than two characters (e2eac38)
• check the new email is not already in use before changing it (0436574)
• return standard error codes in sms passwordless sign-in (74087dd)
• Verify Twillio configuration before using it
• Don't delete the user if sending message with Twillio fails, closes #79
• Check user is active when authenticating with SMS passwordless, closes #99

Features

• token: add verify token endpoint (0a3457a), closes #83

Release 0.7.1

0.7.1 (2022-04-28)

Improvements

• use both the query parameters and the hash when adding the refresh token to an url (af8ea50)
  Eventually we will remove it from the hash, but for now it is present for backwards SDK compatibility

Release 0.7.0

0.7.0 (2022-04-27)

Bug Fixes

• don't fail when unknown options are present in the query parameters (3bf88d8)

Features

• use encoded redirectTo url value in email templates (9b88a91)

Release 0.6.3

0.6.3 (2022-04-21)

Bug Fixes

• filter internal user fields in session (d1c4c9b)

Release 0.6.2

0.6.2 (2022-04-20)

Bug Fixes

• revert 00002 migration name to previous name when migration fails because of it (6a0856a)
  We modified migration file names in previous versions. However while Hasura migration system seems to ignore such name changes, @djgrant/postgres-migrations is not happy with it as it checks hashes from file names.

This fix handles the following cases:

• migration from 0.2 (_ name) to further versions (- name)
• migration from 0.3 (- name) to further versions (- name)

closes #129

Release 0.6.1

0.6.1 (2022-04-20)

Bug Fixes

• allow redirectTo option to start with any AUTH_ACCESS_CONTROL_ALLOWED_REDIRECT_URLS value (dac0332)
• correct redirectTo and fall back to AUTH_CLIENT_URL if the redirectTo option is invalid (2e1819d), closes #137
• remove the AUTH_HOST environment variable (cacce97), closes #139
• run a metadata reload before and after applying hasura-auth metadata (bd9b361)

Performance Improvements

• improve logging on startup (c172c8a)
• improve startup with async imports (e00c073)
• set AUTH_CLIENT_URL and AUTH_ACCESS_CONTROL_ALLOWED_REDIRECT_URLS to lower case (8bb351d)

Release 0.6.0

0.6.0 (2022-04-06)

Bug Fixes

• change default refresh token expiration to 30 days (a2e0d2a), closes #48
• rename JWT claim x-hasura-isAnonymous to x-hasura-is-anonymous (a4ca42e), closes #126

Features

• add emailVerified, phoneNumber, phoneNumberVerified, and activeMfaType to User (4d452d7)