Skip to content

Latest commit

 

History

History
633 lines (356 loc) · 19 KB

CHANGELOG.md

File metadata and controls

633 lines (356 loc) · 19 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

1.35.4 - 2025-02-27

Fixed

  • Restore cookies forwarding in loginWithPassword (after fixed on API)

1.35.3 - 2025-02-19

Fixed

  • Revert previous changes

1.35.2 - 2025-02-19

Fixed

  • Forward cookies (especially RBA trusted device) in loginWithPassword

1.35.1 - 2025-02-05

Changed

  • Add clientId to getPasswordStrength request body

1.35.0 - 2025-02-04

Added

  • add method verifyEmail
  • add method getPasswordStrength

Changed

  • Replace Lodash methods with custom integration
  • Add missing errorMessageKey in ErrorResponse type

1.34.2 - 2025-01-29

Added

  • Add credentials: 'include' to passwordless verification call if SSO is enabled

Fixed

  • loginWithPopup should return resolved/rejected promise

1.34.1 - 2025-01-07

Changed

  • verifyPasswordless should not make redirection with useWebMessage by using POST method endpoint.

1.34.0 - 2024-11-07

Added

  • Add support for passkey additional information.
  • Allow specifying Google variant to use with One Tap.

Fixed

  • Use local storage instead of session storage for code verifier.

1.33.0 - 2024-05-16

Added

  • Add support for account recovery and passkey reset
  • Make WebAuthn origin configurable

1.32.2 - 2024-03-21

Added

  • Add support for discoverable passkey login

1.32.1 - 2024-01-18

Fixed

  • Fix never resolved promise in verifyPasswordless with useWebMessage

Added

  • Address custom field support

1.32.0 - 2024-01-05

Added

  • Add locale variable

1.31.0 - 2023-12-21

Changed

  • Modify verifyPasswordless signature (adding AuthOptions)

1.30.1 - 2023-11-09

Changed

  • Make profile properties optionals in updateProfile's data param type

1.30.0 - 2023-11-07

Changed

  • Remove unnecessary access token parameter from verifyMfaPasswordless method

1.29.1 - 2023-10-16

Fixed

  • Fix issue occurring when checkSession is called less than 20 seconds after another checkSession during no PKCE flow.

1.29.0 - 2023-10-06

Added

  • Added method listTrustedDevices
  • Added method deleteTrustedDevices

1.28.0 - 2023-09-13

Fixed

  • Fix error occuring when checkSession is called quickly after another checkSession
  • Fix error occuring when loginFromSession is called quickly after another loginFromSession

1.27.0 - 2023-08-01

Added

  • Added an optional parameter trustDevice in the verifyMfaPasswordless function
  • Added addressComplement field in the ProfileAddress model.
  • Added rbaEnabled field in RemoteSettings model.
  • Added and optional parameter returnProviderToken in TokenRequestParameters and returns providerAccessToken and providerName fields in AuthResult if returnProviderToken is set to true.
  • Added an optional parameter captchaToken for captcha support in updateEmail.

Fixed

  • Fix error occurring when checkSession is called quickly after a loginWithPassword

1.26.0 - 2022-11-17

Added

  • Initiate an MFA step-up challenge in loginWithPassword when the mfa verification is required
  • Added an optional parameter in the logout function to revoke tokens

1.25.0 - 2022-09-22

Added

  • Support authentication with the field custom_identifier
  • Field custom_identifier is now allowed during signup

1.24.1 - 2022-08-03

Fixed

Fix parameter in web messages.

1.24.0 - 2022-07-25

Added

Support for orchestrated flows.

1.23.0 - 2022-06-15

Added

Google One Tap instantiation method.

Changed

Align startMfaPhoneNumberRegistration response on the startMfaEmailRegistration one.

Removed

A deprecated legacy endpoint limited to a specific customer has been removed for security reasons.

1.22.0 - 2022-02-22

Added

  • Introduce verifyMfaPasswordless to complete an MFA passwordless flow
  • Add new 2nd factor email identifier management functions:
    • verifyMfaEmailRegistration
    • startMfaEmailRegistration
    • removeMfaEmail
  • Add an optional parameter captchaToken for captcha support in signup, startPasswordless and requestPasswordReset

Changed

Support the step up from a fresh access token with function getMfaStepUpToken

1.21.1 - 2021-11-30

Added

Add possibility to refresh access token with a refresh token

1.21.0 - 2021-07-30

Features

  • Initiate an MFA step-up challenge
  • List registered MFA credentials
  • Add or remove MFA phone number credential

Changed

  • startPasswordless can now can take a MFA step-up token to initiate a second factor challenge
  • startPasswordless now returns an MFA challenge ID when using in step-up flows
  • verifyPasswordless refactored to be able to complete second factor challenges

1.20.1 - 2021-04-15

Added

Added PKCE extra security in passwordless start flow.

Changed

Remove Instagram related code as it is no longer a supported social provider.

Fixed

Moved cordova-plugin-inappbrowser typings from devDependencies to dependencies.

1.20.0 - 2021-01-14

Features

1.19.0 - 2020-12-10

Features

  • Only generate a code_challenge for public clients in authorization code flows.
  • Hardcode to response_type=token for confidential clients in web message requests.

Fixed

Refactor tests to cover a wider set of request permutations.

Changed

Revamp of this changelog to follow Keep a Changelog guidelines.

1.18.1 - 2020-11-30

Fixed

  • The loginWithSocialProvider method returns now the object reference from InAppBrowser within Cordova context.
  • The returnToAfterEmailConfirmation parameter is added to the signupWithWebAuthn method and allows to override the redirect URL specified in the Signup email template.
  • The verifyPasswordless method receives now correctly the auth options.

1.18.0 - 2020-10-30

Features

  • Generate a PKCE code_challenge by default in all authorization code flows (responseType === 'code').
  • Use the authorization code flow with PKCE in checkSession.

Fixed

Rename erroneously named config value pkceEnabled to pkceEnforced.

1.17.2 - 2020-10-02

Fixed

  • Upgrade all dependencies.
  • Fix IE/Edge window closing warning.

1.17.1 - 2020-09-15

Fixed

Fix the CircleCi job to deploy a new version.

1.17.0 - 2020-09-14

Features

Add a new method to signup with WebAuthn: signupWithWebAuthn.

1.16.0 - 2020-09-10

Features

  • The acceptTos (Term Of Service) parameter in the AuthOptions was removed.
  • The generic authentication callback was updated, it no longer calls the same endpoint.
  • A new AuthOptions parameter useWebMessage was added to leverage web messages and redirectionless authentication.
  • The following methods return now a Promise<AuthResult> instead of Promise<void>:
  • The following parameters prompt, display and responseMode of the AuthOptions model are now string unions.

1.15.0 - 2020-07-07

Features

Add the optional friendlyName parameter to the addNewWebAuthnDevice method to set the device's name.

1.14.0 - 2020-07-02

Features

  • Add a new method to fetch the profile data: getSignupData.
  • The error message thrown when the WebAuthn API is not available is updated.

1.14.0-beta.2 - 2020-06-17

Features

Add new methods to allow management of FIDO2 devices: listWebAuthnDevices & removeWebAuthnDevice.

Fixed

Throw an error when the Credentials Management API is not available.

1.14.0-beta.1 - 2020-06-15

Features

Add new methods to allow implementation of login with biometrics: addNewWebAuthnDevice & loginWithWebAuthn.

1.13.0 - 2020-05-18

Features

Add two new methods to request the verification of the phone number and email address: sendPhoneNumberVerification & sendEmailVerification

1.12.1 - 2020-05-11

Fixed

Correct the signature of the verifyPasswordless method.

1.12.0 - 2020-04-17

Features

Move the persistent parameter from the loginWithPassword method to AuthOptions payload object to make it available in every login method.

1.11.0 - 2020-04-16

Features

Add the persistent parameter to the loginWithPassword method to choose whether the user session is persisted if the SSO feature is enabled.

1.10.0 - 2020-02-05

Features

Add the returnToAfterPasswordReset parameter for reset password and the returnToAfterEmailConfirmation parameter for signup.

1.9.3 - 2020-01-07

Fixed

The logout method was fixed on Safari and IE11.

1.9.2 - 2019-12-02

Fixed

Add the missing implementation of Buffer to address an issue with the UMD bundle when PKCE is enabled.

1.9.1 - 2019-11-29

Fixed

  • Open a webview for social login if the Cordova platform is iOS.
  • Support compatibility with IE11.

1.9.0 - 2019-10-28

Features

Support PKCE in login with password

1.8.0 - 2019-10-21

Features

Export the remote settings and the ErrorResponse model.

1.7.1 - 2019-09-19

Fixed

Customs fields and consents snake_case conversion

[1.7.0] - 2019-09-06

Features

The Credentials Management API is now supported for the signup.

Fixed

Fix redirectUrl argument for updateEmail function.

1.6.0 - 2019-08-05

Features

  • You can now redirect a profile to a specific URL after signup or profileUpdate with the new redirectUrl argument.
  • The Credentials Management API is now supported by the SDK. It will remove friction from sign-in flows by allowing users to be automatically signed back into a site even if their session has expired or they saved credentials on another device. Thus a new loginWithCredentials method was added and new arguments are passed to the loginWithPassword and logout methods. However it's still an experimental feature, so check first your browser compatibility.

Changes

The new default is to use the scopes defined for your client via the ReachFive console.

1.5.0 - 2019-06-24

Features

Update the signature of the loginWithSocialProvider method to handle pkce support.

Fixed

Pass auth options scope used by loginWithPassword and signup to the Identity API calls.

1.4.0 - 2019-06-21

Features

  • Update the signature of the requestPasswordReset method to handle a custom redirect url on the email sent.
  • Update the signature of the requestPasswordReset method to handle request password with a phone number.
  • Update the signature of the updatePassword method to handle update password with a phone number.

1.3.0 - 2019-06-11

Features

Update the signature of the loginWithPassword method to handle login with a phone number.

1.2.1 - 2019-03-21

Improvements

  • Remove validation.ts library.
  • Fix tslint warnings.
  • Error messages changes for SDK configuration.

1.1.4 - 2019-03-21

Improvements

Automatise the deployment of a new release with circleci.

1.1.3 - 2019-03-15

Improvements

  • Fix the typography of the oldPassword argument of the updatePassword method.
  • Upgrade some dependencies.
  • Implement tslint.
  • Remove yarn.