CHANGELOG.md

@atproto/oauth-provider-ui

0.9.0

Minor Changes

• #5305 fca9bd8 Thanks @bigmoves! - Rebuild the OAuth provider UI on shadcn/ui (Base UI, base-nova). Same flows, steps and copy; the UX patterns are recomposed for shadcn. Forms use the browser's native constraint validation on Base UI (no form library), icons move to Lucide, and toasts to the Base UI toast. Branding colours configured on the provider apply at runtime, with a neutral fallback when none are set.

Patch Changes

• #5305 fca9bd8 Thanks @bigmoves! - Add an optional per-scheme background image to the authorization screens via branding.background. The provider paints the configured light and dark image behind the auth card (cover / center over the neutral base), chosen by prefers-color-scheme. On the PDS, configure it with PDS_BACKGROUND_LIGHT_URL and PDS_BACKGROUND_DARK_URL.

• #5311 16bfd80 Thanks @dolciss! - Update Japanese translations

0.8.11

Patch Changes

• #5310 2021690 Thanks @nilaallj! - Updated Swedish translations

• #5296 aad541b Thanks @nilaallj! - l10n: Plural formatting + string concatenation fixes

• Updated dependencies []:

  • @atproto/oauth-provider-api@0.7.9

0.8.10

Patch Changes

• #5295 6a3d607 Thanks @matthieusieben! - Update lingui dependency

• #5295 6a3d607 Thanks @matthieusieben! - Update vitest dependencies

• #5295 6a3d607 Thanks @matthieusieben! - Update Vite to version 8

• #5301 8c07338 Thanks @43081j! - Switch from destructured default imports to named imports of CommonJS dependencies.

• Updated dependencies []:

  • @atproto/oauth-provider-api@0.7.8

0.8.9

Patch Changes

• #5286 6866a5d Thanks @dolciss! - Add Japanese (ja) translations

0.8.8

Patch Changes

• #5220 5d2943e Thanks @AG0708! - Show each connected app's granted OAuth permissions before access is revoked.

• #5280 9556dcb Thanks @matthieusieben! - Remove redundent vitest.config.ts file

• #5273 87e6a95 Thanks @matthieusieben! - Fix a bug that would cause oauth session not recently refreshed not to be listed in the UI.

• #5274 0e773f3 Thanks @bigmoves! - Fix missing list bullets on the account "About" page at mobile widths, where the base prose class was only applied from the md breakpoint up.

• #5275 d692128 Thanks @bigmoves! - Remove the ↗ marker appended to external links.

• #5268 602f4a8 Thanks @bigmoves! - Restore the current authorization flow step on page refresh by encoding it in the URL fragment (#step=<slug>)

• #5188 28caa70 Thanks @matthieusieben! - Update react dependency

• #5269 df27599 Thanks @bigmoves! - Use "sign in" terminology consistently in the OAuth authorization flow: the post-authorization redirect screen now says "Sign-in complete" / "Sign-in canceled" (previously "Login complete" / "Login canceled"), and the account picker's "Another account" option is labeled "Sign in to an account that is not listed"

• Updated dependencies [87e6a95]:

  • @atproto/oauth-provider-api@0.7.7

0.8.7

Patch Changes

• Updated dependencies []:
  • @atproto/oauth-provider-api@0.7.6

0.8.6

Patch Changes

• #5197 a0c49d9 Thanks @matthieusieben! - Rewrite import statements to be compatible with TypeScript's verbatimModuleSyntax config.

• Updated dependencies []:

  • @atproto/oauth-provider-api@0.7.5

0.8.5

Patch Changes

• #5177 54a8364 Thanks @dolciss! - fix: add missing links

• Updated dependencies []:

  • @atproto/oauth-provider-api@0.7.4

0.8.4

Patch Changes

• #5099 b43ec31 Thanks @matthieusieben! - Update TypeScript build to rely on references to composite internal projects

• #5099 b43ec31 Thanks @matthieusieben! - Bundle only necessary files in the NPM tarball, including the CHANGELOG.md and README.md files (if present).

• Updated dependencies [b43ec31, b43ec31, b43ec31]:

  • @atproto/oauth-provider-api@0.7.3

0.8.3

Patch Changes

• #5151 a51c45d Thanks @matthieusieben! - Update dependencies

0.8.2

0.8.1

Patch Changes

• #5111 abab1ca Thanks @nilaallj! - Add Swedish (sv) translations

0.8.0

Minor Changes

• #5053 9acd39b Thanks @matthieusieben! - Update Account properties to contain strongly typed did

• #5053 9acd39b Thanks @matthieusieben! - Add ability to deactivate and delete account from the account manager interface

Patch Changes

• #5106 6fcf9b2 Thanks @matthieusieben! - Use setTimeout and an HTML anchor as redirect strategy

• #4537 61c0066 Thanks @quiple! - Add Corean (ko) translations

• #5053 9acd39b Thanks @matthieusieben! - Fix credentials error not being displayed in sign-in form

• #5053 9acd39b Thanks @matthieusieben! - Keep notifications message in sync with the current locale

• #5053 9acd39b Thanks @matthieusieben! - Remove unused consentRequired logic from OAuth consent flow UI

• #5059 dd77cdd Thanks @dolciss! - Add Japanese (ja) translations

• #4331 22b0c43 Thanks @tdelgado00! - Add Spanish (es) translations

• #5103 55172ab Thanks @ryanda9910! - Fix the OAuth consent screen overstating what an application can do. A request scoped to a few specific app.bsky.* collections (e.g. only creating app.bsky.feed.post records) no longer claims the app can "Manage your profile, posts, likes and follows". The blanket wording is now reserved for requests that actually grant broad write access (any collection or transition:generic); narrowly scoped Bluesky requests are described as accessing specific parts of the account and surface the exact per-collection breakdown instead.

0.7.4

Patch Changes

• #4967 9fc720c Thanks @matthieusieben! - Use TypeScript 7 to build package

• #5105 1d0f332 Thanks @matthieusieben! - Always show consent screen at the end of oauth flows

0.7.3

Patch Changes

• #5089 85b4eb8 Thanks @matthieusieben! - Improve UX when the browser fails to redirect the user after the OAuth flow ends

• #5089 85b4eb8 Thanks @matthieusieben! - Fix error page no longer showing "This request has expired" when navigating back to the authorization page

0.7.2

Patch Changes

• #4986 6c63f7d Thanks @matthieusieben! - Removal of dead and deprecated code

• #4986 6c63f7d Thanks @matthieusieben! - Improve form related UX (and DX) by using a unified form component that properly surfaces submission errors.

• #4986 6c63f7d Thanks @matthieusieben! - Add ability to change the user handle through the account manager interface

• #4986 6c63f7d Thanks @matthieusieben! - Display an error message if "Deny access" causes an error (e.g. network)

• #4986 6c63f7d Thanks @matthieusieben! - Remove the need to complete the hCaptcha again when there is a form submission error, or when the user navigates "back" to a previous step, then "forward" again to the step with the hCaptcha.

0.7.1

Patch Changes

• #5008 30ccc25 Thanks @matthieusieben! - Increase maximum handle length in OAuth flow

0.7.0

Minor Changes

• #4883 64f5148 Thanks @matthieusieben! - Add support for email verification and management in the account management interface

0.6.0

Minor Changes

• #4929 f01c59f Thanks @devinivy! - BREAKING: Drop support for Node.js 18 and 20. Node.js 22 is now the minimum supported version. Docker images now use Node.js 24.

• #4943 c459153 Thanks @devinivy! - BREAKING: Convert to pure ESM. All packages now ship "type": "module" with ES module output and Node16 module resolution.

  Node.js 22's require() compatibility layer can still load these packages in CommonJS code.

• #4930 908bece Thanks @devinivy! - Build with TypeScript 6.0.

0.5.2

Patch Changes

• #4880 5d3e248 Thanks @matthieusieben! - Fix /.well-known/change-password page

0.5.1

Patch Changes

• #4873 84eb5ed Thanks @matthieusieben! - Fix reset password flow

0.5.0

Minor Changes

• #4820 b3ce11a Thanks @matthieusieben! - Unify account management and authorization pages into a signle package

Patch Changes

• #4820 b3ce11a Thanks @matthieusieben! - Account management interface improvements

0.4.3

Patch Changes

• #4619 a2e4e95 Thanks @matthieusieben! - Fix depencies version

• #4607 19ecf5f Thanks @mozzius! - Fix avatar shape in OAuth UI

• #4606 78fee14 Thanks @matthieusieben! - Add console error logging upon client-side API request errors

0.4.2

0.4.1

0.4.0

Minor Changes

• #4461 5d8e7a6 Thanks @ThisIsMissEm! - Support selecting view based on prompt parameter

0.3.6

Patch Changes

• #4382 be8e6c1 Thanks @matthieusieben! - Add toScopes() utility on IncludeScope

0.3.5

0.3.4

Patch Changes

• #4301 f496fa2c4 Thanks @matthieusieben! - Set dark background on authorization page's <body> in dark mode

0.3.3

0.3.2

0.3.1

Patch Changes

• #4186 d570db43d Thanks @matthieusieben! - Add Japanese translation on OAuth Provider UI

0.3.0

Minor Changes

• f4cb3e4d0 Thanks @matthieusieben! - Adapt to UI to support permission set.

0.2.1

0.2.0

Minor Changes

• #3806 1899b1fc1 Thanks @matthieusieben! - Display detailed description of requested permissions

0.1.11

0.1.10

0.1.9

0.1.8

0.1.7

Patch Changes

• #3916 71b9dcda9 Thanks @matthieusieben! - Show sign-in screen instead of welcome screen when user already signed-in

0.1.6

Patch Changes

• d1e3e68dd Thanks @matthieusieben! - Improve auto completion of sing-in & reset password flows

0.1.5

Patch Changes

• #3820 8318c5718 Thanks @matthieusieben! - Add support for transition:email oauth scope

0.1.4

Patch Changes

• #3810 e1bda27e5 Thanks @matthieusieben! - Fix CORS issue on <img> tags

• #3797 a48b093f0 Thanks @matthieusieben! - Use more consistent UI regardless of profile completion

0.1.3

Patch Changes

• #3778 81524fcb0 Thanks @matthieusieben! - Minor UI fixes

• #3781 a70dad5ae Thanks @estrattonbailey! - Remove lazy loading of hcaptcha library to resolve chunk loading errors.

0.1.2

0.1.1

Patch Changes

• #3754 1e461eab0 Thanks @matthieusieben! - Fix dependencies

• #3754 1e461eab0 Thanks @matthieusieben! - Explicit exported package files

0.1.0

Minor Changes

• #3659 371e04aad Thanks @matthieusieben! - New build system

Patch Changes

• #3667 8b98fec88 Thanks @matthieusieben! - Hide client id pathname if it is exaclty /oauth-client-metadata.json

0.0.2

Patch Changes

• #3640 cc4122652 Thanks @matthieusieben! - Split OAuth Provider's ui into its own package