2.0.0

What's Changed

• 📝 docs(self hosting): Add deployment link for Alibaba Cloud by @LYH-RAIN in #464
• fix: consistent ClientID assignment, close #470 by @localnerve in #472
• v2 optimise performance + security by @lakhansamani in #466
• chore: fix mail verification by @lakhansamani in #475
• fix: use JWTPublicKey for ECDSA token parsing by @lakhansamani in #487
• test: add missing test coverage for admin queries and edge cases by @lakhansamani in #498
• fix: respect isStrongPasswordDisabled in password validator by @lakhansamani in #488
• fix: use crypto/rand for OTP generation by @lakhansamani in #489
• fix: use constant-time comparison for admin secret by @lakhansamani in #490
• fix: add revoked user check to VerifyEmail and VerifyOTP by @lakhansamani in #491
• fix: correct boolean condition for password change in UpdateProfile by @lakhansamani in #493
• fix: add OTP expiration check in ResetPassword by @lakhansamani in #494
• fix: use zero-length slice with capacity for EmailTemplates by @lakhansamani in #496
• fix: validate roles in VerifyEmail HTTP handler by @lakhansamani in #497
• fix: correct verification request expiry logic in Login by @lakhansamani in #492
• fix: check verificationRequest.Identifier for login method in VerifyEmail by @lakhansamani in #495
• fix: OAuth2/OIDC standards compliance for HTTP handlers by @lakhansamani in #499

New Contributors

• @LYH-RAIN made their first contribution in #464
• @localnerve made their first contribution in #472

Full Changelog: 1.4.4...2.0.0