Turning on micrometer by default

What's Changed

• Feature/micrometer by @opticSquid in #110

Full Changelog: v2.4.2...v2.4.3

Ip Test

Merge pull request #108 from opticSquid/fix/ip

trying to see which ip it is picking up

Rmoves Gender from User info and adjusts cookie params to work in cloud envs

What's Changed

• removes gender from basic user info by @opticSquid in #104
• fixing cookie behaviour to allow authentication in cloud envs by @opticSquid in #105
• releasing new version by @opticSquid in #106

Full Changelog: v2.4.0...v2.4.1

Moving telemetry to grpc from http

What's Changed

• Feature/migrating telemetry to grpc by @opticSquid in #103

Full Changelog: v2.3.7...v2.4.0

Adds a cookie to override the refresh token client side and expire immidietly on logout

What's Changed

• Feature/delete refresh cookie on logout by @opticSquid in #102

Full Changelog: v2.3.6...v2.3.7

Adds field in response to indicate if the device is trusted or not

What's Changed

• Adds an extra feild in result to indicate if the device is trusted or not. also limits the message values by @opticSquid in #101

Full Changelog: v2.3.5...v2.3.6

Moving trust device to user controller

What's Changed

• releasing new version by @opticSquid in #100

Full Changelog: v2.3.4...v2.3.5

Adds domain to cookie

What's Changed

• Adds domain to cookie by @opticSquid in #99

Full Changelog: v2.3.3...v2.3.4

Fixed cors errors

What's Changed

• Fixes cors configuration by @opticSquid in #98

Full Changelog: v2.3.2...v2.3.3

Access token, Refresh Token flow changed.

Change Log

• All routes which can be accessed by normal user has been moved to /auth base route. So, now
  • Signup
  • Verify
  • Login
  • Trust Device
  • Renew
    these all routes come under /auth base route.
• When logging in or renewing token,
  • accessToken is now sent as a part of response body
  • refresh-token is sent as a HTTP only cookie, max age set at expiration of the token and path set to renew token path.
  • this is done so that when renew token request is sent browser automatically attaches the cookie to the request without the intervention of the client.
  • the cookie is set to http only so that client side javascript can not read it.
  • the cookie is set to SameSite: Strict so that this token can not be passed to other sites.

Main Branch History

• Feature/refresh token in cookie by @opticSquid in #95
• Feature/dependency upgrades by @opticSquid in #96
• Fix/add same site by @opticSquid in #97

Full Changelog: v2.2.1...v2.3.2