Releases · authorizerdev/authorizer

2.2.0

📝 docs(self hosting): Add deployment link for Alibaba Cloud by @LYH-RAIN in #464
fix: consistent ClientID assignment, close #470 by @localnerve in #472
v2 optimise performance + security by @lakhansamani in #466
chore: fix mail verification by @lakhansamani in #475
fix: use JWTPublicKey for ECDSA token parsing by @lakhansamani in #487
test: add missing test coverage for admin queries and edge cases by @lakhansamani in #498
fix: respect isStrongPasswordDisabled in password validator by @lakhansamani in #488
fix: use crypto/rand for OTP generation by @lakhansamani in #489
fix: use constant-time comparison for admin secret by @lakhansamani in #490
fix: add revoked user check to VerifyEmail and VerifyOTP by @lakhansamani in #491
fix: correct boolean condition for password change in UpdateProfile by @lakhansamani in #493
fix: add OTP expiration check in ResetPassword by @lakhansamani in #494
fix: use zero-length slice with capacity for EmailTemplates by @lakhansamani in #496
fix: validate roles in VerifyEmail HTTP handler by @lakhansamani in #497
fix: correct verification request expiry logic in Login by @lakhansamani in #492
fix: check verificationRequest.Identifier for login method in VerifyEmail by @lakhansamani in #495
fix: OAuth2/OIDC standards compliance for HTTP handlers by @lakhansamani in #499

Full Changelog: 1.4.4...2.0.0

fix: use JWTPublicKey for ECDSA token parsing by @lakhansamani in #487
test: add missing test coverage for admin queries and edge cases by @lakhansamani in #498
fix: respect isStrongPasswordDisabled in password validator by @lakhansamani in #488
fix: use crypto/rand for OTP generation by @lakhansamani in #489
fix: use constant-time comparison for admin secret by @lakhansamani in #490
fix: add revoked user check to VerifyEmail and VerifyOTP by @lakhansamani in #491
fix: correct boolean condition for password change in UpdateProfile by @lakhansamani in #493
fix: add OTP expiration check in ResetPassword by @lakhansamani in #494
fix: use zero-length slice with capacity for EmailTemplates by @lakhansamani in #496
fix: validate roles in VerifyEmail HTTP handler by @lakhansamani in #497
fix: correct verification request expiry logic in Login by @lakhansamani in #492
fix: check verificationRequest.Identifier for login method in VerifyEmail by @lakhansamani in #495

Full Changelog: 2.0.0-rc.5...2.0.0-rc.6