Releases: volatiletech/authboss
Releases · volatiletech/authboss
v3.5.0
v3.4.0
See CHANGELOG.md for details.
v3.2.2
- Upgraded dependencies
- Upgraded min Go version
See CHANGELOG.md for detailed changes.
v3.2.1
- Fix security issue in recover + 2fa scenarios.
See CHANGELOG.md for detailed changes.
v3.2.0
- Add events for 2fa add/remove
See CHANGELOG.md for detailed changes.
v3.1.1
v3.1.0
- Increase security around totp 2fa package. See changelog for details.
- Remove some needless flash messages
See CHANGELOG.md for detailed changes.
v3.0.5
Fix open redirect issue.
See CHANGELOG.md for detailed changes.
v3.0.4
Add cache-control header to totp qr codes.
See CHANGELOG.md for detailed changes.
v3.0.3
Fix that EventRecoverStart/End were not being called and so it was difficult to hook recover password flows.
Also note that remember
was relying on this to delete remember cookies & all database remember tokens for a user, this previously was not happening and now it is and is sort of a behavior change. Upgrade carefully!
See CHANGELOG.md for detailed changes.