|
1 | 1 | # Changelog |
2 | 2 |
|
3 | | -## v1.0.14 (TBA) |
4 | | - |
5 | | -* Changed minmum password length to 8 (OWASP/NIST recommendations) |
6 | | -* Fixed bug where `Pow.Store.CredentialsCache` wasn't used due to how `Pow.Store.Base` macro worked |
7 | | -* `Pow.Plug.Session` now stores a keyword list with metadata for the session rather than just the timestamp |
8 | | - |
9 | | -## v1.0.13 (2019-08-25) |
10 | | - |
11 | | -* Updated `PowEmailConfirmation.Ecto.Schema.changeset/3` so; |
12 | | - * when `:email` is identical to `:unconfirmed_email` it won't generate new `:email_confirmation_token` |
13 | | - * when `:email` is identical to the persisted `:email` value both `:email_confirmation_token` and `:unconfirmed_email` will be set to `nil` |
14 | | - * when there is no `:email` value in the params nothing happens |
15 | | -* Updated `PowEmailConfirmation.Ecto.Schema.confirm_email_changeset/1` so now `:email_confirmation_token` is set to `nil` |
16 | | -* Updated `Pow.Ecto.Schema.Changeset.user_id_field_changeset/3` so the e-mail validator now accepts unicode e-mails |
17 | | -* Added `PowEmailConfirmation.Ecto.Context.current_email_unconfirmed?/2` and `PowEmailConfirmation.Plug.pending_email_change?/1` |
18 | | -* Added `:email_validator` configuration option to `Pow.Ecto.Schema.Changeset` |
19 | | -* Added `Pow.Ecto.Schema.Changeset.validate_email/1` |
20 | | -* Fixed bug in `PowEmailConfirmation.Phoenix.ControllerCallbacks.send_confirmation_email/2` where the confirmation e-mail wasn't send to the updated e-mail address |
21 | | - |
22 | | -## v1.0.12 (2019-08-16) |
23 | | - |
24 | | -* Added API integration guide |
25 | | -* Added `:reset_password_token_store` configuration setting |
26 | | -* To prevent timing attacks, `Pow.Ecto.Context.authenticate/2` now verifies password on a blank user struct when no user can be found for the provided user id, but will always return nil. The blank user struct has a nil `:password_hash` value. The struct will be passed along with a blank password to the `verify_password/2` method in the user schema module. |
27 | | -* To prevent timing attacks, when `Pow.Ecto.Schema.Changeset.verify_password/3` receives a struct with a nil `:password_hash` value, it'll hash a blank password, but always return false. |
28 | | -* To prevent timing attacks, the UUID is always generated in `PowResetPassword.Plug.create_reset_token/2` whether the user exists or not. |
29 | | -* `PowPersistentSession.Plug.Base` now accepts `:persistent_session_ttl` which will pass the TTL to the cache backend and used for the max age of the sesion cookie in `PowPersistentSession.Plug.Cookie` |
30 | | -* Deprecated `:persistent_session_cookie_max_age` configuration setting |
31 | | -* `Pow.Store.Backend.MnesiaCache` can now auto join clusters |
32 | | -* `Pow.Store.Backend.MnesiaCache.Unsplit` module added for self-healing after network split |
33 | | -* Removed `:nodes` config option for `Pow.Store.Backend.MnesiaCache` |
34 | | - |
35 | | -## v1.0.11 (2019-06-13) |
36 | | - |
37 | | -* Fixed bug in router filters with Phoenix 1.4.7 |
38 | | - |
39 | | -## v1.0.10 (2019-06-09) |
40 | | - |
41 | | -* Prevent browser cache of `Pow.Phoenix.SessionController.new/2`, `Pow.Phoenix.RegistrationController.new/2` and `PowInvitation.Phoenix.InvitationController.edit/2` by setting "Cache-Control" header unless it already has been customized |
42 | | -* All links in docs generated with `mix docs` and on [hexdocs.pm](http://hexdocs.pm/pow/) now works |
43 | | -* Generated docs now uses lower case file name except for `README`, `CONTRIBUTING` and `CHANGELOG` |
44 | | -* Removed duplicate call for `Pow.Plug.Session.delete/2` in `Pow.Plug.Sesssion.create/3` |
45 | | - |
46 | | -## v1.0.9 (2019-06-04) |
47 | | - |
48 | | -### Changes |
49 | | - |
50 | | -* `Pow.Phoenix.Router` will now only add specific routes if there is no matching route already defined |
51 | | -* Added `Pow.Plug.get_plug/1` and instead of `:mod`, `:plug` is used in config |
52 | | -* `Pow.Ecto.Context.authenticate/2` now returns nil if user id or password is nil |
53 | | - |
54 | | -### Bug fixes |
55 | | - |
56 | | -* Fixed bug with exception raised in `Pow.Ecto.Schema.normalize_user_id_field_value/1` when calling `Pow.Ecto.Context.get_by/2` with a non binary user id |
57 | | -* Fixed bug with exception raised in `Pow.Ecto.Schema.normalize_user_id_field_value/1` when calling `Pow.Ecto.Context.authenticate/2` with a non binary user id |
58 | | - |
59 | | -### Deprecations |
60 | | - |
61 | | -* Deprecated `Pow.Plug.get_mod/1` |
62 | | -* Removed call to `Pow.Ecto.Context.repo/1` |
63 | | - |
64 | | -## v1.0.8 (2019-05-24) |
65 | | - |
66 | | -### Changes |
67 | | - |
68 | | -* Added support for layout in mails with `Pow.Phoenix.Mailer.Mail` by setting `conn.private[:pow_mailer_layout]` same way as the Phoenix layout with `conn.private[:phoenix_layout]` |
69 | | -* Added `:prefix` repo opts support to use in multitenant apps |
70 | | -* Removed `@changeset.data.__struct__.pow_user_id_field()` in template in favor of using `Pow.Ecto.Schema.user_id_field/1` |
71 | | - |
72 | | -### Bug fixes |
73 | | - |
74 | | -* Fixed bug in `Pow.Ecto.Schema.Changeset.current_password_changeset/3` where an exception would be thrown if the virtual `:current_password` field of the user struct was set and either the `:current_password` change was blank or identical |
75 | | - |
76 | | -### Deprecations |
77 | | - |
78 | | -* Deprecated `Mix.Pow.Ecto.Migration.create_migration_files/3` and moved it to `Mix.Pow.Ecto.Migration.create_migration_file/3` |
79 | | -* Deprecated `Pow.Ecto.Context.repo/1` and moved it to `Pow.Config.repo!/1` |
80 | | -* Deprecated `Pow.Ecto.Context.user_schema_mod/1` and moved it to `Pow.Config.user!/1` |
81 | | - |
82 | | -## v1.0.7 (2019-05-01) |
83 | | - |
84 | | -* Fixed bug with Phoenix 1.4.4 scoped routes |
85 | | - |
86 | | -## v1.0.6 (2019-04-19) |
87 | | - |
88 | | -* Fixed bug where custom layout setting raised exception in `Pow.Phoenix.ViewHelpers.layout/1` |
89 | | -* Prevent users from changing their email to one already taken when the PowEmailConfirmation extension has been enabled |
90 | | - |
91 | | -## v1.0.5 (2019-04-09) |
92 | | - |
93 | | -* Added `extension_messages/1` to extension controllers and callbacks |
94 | | -* Improved feedback for when no templates are generated for an extension with `mix pow.extension.phoenix.gen.templates` and `mix pow.extension.phoenix.mailer.gen.templates` tasks |
95 | | -* Error flash is no longer overridden in `Pow.Phoenix.PlugErrorHandler` if the error message is nil |
96 | | -* Fixed bug in the migration generator where `references/2` wasn't called with options |
97 | | -* Support any `:plug` version below `2.0.0` |
98 | | -* Deprecated `Pow.Extension.Ecto.Context.Base` |
99 | | - |
100 | | -## v1.0.4 (2019-03-13) |
101 | | - |
102 | | -* Added `PowInvitation` to the `mix pow.extension.phoenix.gen.templates` and `mix pow.extension.phoenix.mailer.gen.templates` tasks |
103 | | -* Fixed issue in umbrella projects where extensions wasn't found in environment configuration |
104 | | -* Fixed so `:namespace` environment config can be used as web app module name |
105 | | -* Shell instructions will only be printed if the configuration is missing |
106 | | -* Now requires that `:ecto` or `:phoenix` are included in the dependency list for the app to run respective mix tasks |
107 | | -* Deprecated `Mix.Pow.context_app/0` |
108 | | -* Deprecated `Mix.Pow.ensure_dep!/3` |
109 | | -* Deprecated `Mix.Pow.context_base/1` |
110 | | - |
111 | | -## v1.0.3 (2019-03-09) |
| 3 | +## v1.1.0 (TBA) |
112 | 4 |
|
113 | 5 | ### Changes |
114 | 6 |
|
115 | | -* Added `PowInvitation` extension |
116 | | -* Added support in `Pow.Ecto.Schema` for Ecto associations fields |
117 | | -* Added support for adding custom methods with `Pow.Extension.Ecto.Schema` through `__using__/1` macro in extension ecto schema module |
118 | | -* Help information raised with invalid schema arguments for `pow.install`, `pow.ecto.install`, `pow.ecto.gen.migration`, and `pow.ecto.gen.schema` mix tasks |
119 | | -* `PowEmailConfirmation` now redirects unconfirmed users to `after_registration_path/1` or `after_sign_in_path/1` rather than `pow_session_path(conn, :new)` |
120 | | - |
121 | | -### Bug fixes |
122 | | - |
123 | | -* Correct shell instructions for `mix pow.install` task with custom schema |
124 | | -* Fixed bug in `Pow.Extension.Phoenix.Router.Base` and `Pow.Extension.Phoenix.Messages` where the full extension name wasn't used to namespace methods |
| 7 | +- Requires Elixir 1.7 or higher |
| 8 | +- Requires Ecto 3.0 or higher |
| 9 | +- Requires Phoenix 1.4.7 or higher |
125 | 10 |
|
126 | 11 | ### Deprecations |
127 | 12 |
|
128 | | -* Deprecated `Pow.Extension.Config.underscore_extension/1` |
129 | | -* Deprecated `PowResetPassword.Ecto.Context.password_changeset/2` |
130 | | -* Deprecated `Pow.Ecto.Schema.filter_new_fields/2` |
131 | | -* Deprecated `:messages_backend_fallback` setting for extension controllers |
132 | | -* Removed deprecated macro `router_helpers/1` in `Pow.Phoenix.Controller` |
133 | | - |
134 | | -## v1.0.2 (2019-02-28) |
135 | | - |
136 | | -* Added flash error message about e-mail confirmation for when user changes e-mail with PowEmailConfirmation enabled |
137 | | -* Added `new_password_changeset/3` and `confirm_password_changeset/3` to `Pow.Ecto.Schema.Changeset` |
138 | | -* Redis cache store backend guide |
139 | | -* Correct shell instructions for `mix pow.phoenix.gen.templates` task |
140 | | -* Only load environment config in `Pow.Config.get/3` when no key is set in the provided config |
141 | | -* Fixed issue in `Pow.Store.Backend.MnesiaCache.keys/1` and `Pow.Store.Backend.EtsCache.keys/1` so they now return keys without namespace |
142 | | -* `Pow.Store.Backend.MnesiaCache.put/3` now raises an error if TTL is not provided |
143 | | - |
144 | | -### Breaking changes |
145 | | - |
146 | | -* `PowResetPassword.Plug.reset_password_token/1` has been removed |
147 | | - |
148 | | -## v1.0.1 (2019-01-27) |
149 | | - |
150 | | -* `pow.extension.ecto.gen.migrations` mix task will output warning when a migration file won't be generated for any particular extension |
151 | | -* Leading and trailing whitespace is removed from the user id field value (in addition to forced lower case) |
152 | | -* An exception is raised when `pow_routes/0` or `pow_extension_routes/0` are used inside router scopes with aliases |
153 | | -* Mail view templates assigns now has `[user: user, conn: conn]` along with the template specific assigns |
154 | | -* Mail view subject methods now gets the same assigns passed as mail view template assigns instead of only `[conn: conn]` |
155 | | -* Added `pow_registration_routes/0`, `pow_session_routes/0` and `pow_scope/1` macros to the router module |
156 | | -* Added guide on how to disable registration |
157 | | - |
158 | | -## v1.0.0 (2018-11-18) |
159 | | - |
160 | | -* Phoenix 1.4 support |
161 | | -* Ecto 3.0 support |
| 13 | +- Removed deprecated method `PowResetPassword.Ecto.Context.password_changeset/2` |
| 14 | +- Removed deprecated method `Pow.Extension.Config.underscore_extension/1` |
| 15 | +- Removed deprecated method `Mix.Pow.context_app/0` |
| 16 | +- Removed deprecated method `Mix.Pow.ensure_dep!/3` |
| 17 | +- Removed deprecated method `Mix.Pow.context_base/1` |
| 18 | +- Removed deprecated method `Mix.Pow.Ecto.Migration.create_migration_files/3` |
| 19 | +- Removed deprecated method `Pow.Ecto.Context.repo/1` |
| 20 | +- Removed deprecated method `Pow.Ecto.Context.user_schema_mod/1` |
| 21 | +- Removed deprecated method `Pow.Plug.get_mod/1` |
| 22 | +- Config fallback set with `:messages_backend_fallback` configuration option removed in `Pow.Extension.Phoenix.Controller.Base` |
| 23 | +- Removed deprecated Bootstrap support in `Pow.Phoenix.HTML.FormTemplate` |
| 24 | +- Removed deprecated module `Pow.Extension.Ecto.Context.Base` |
| 25 | +- `:mod` in the `:pow_config` private plug key no longer set in `Pow.Plug.Base` |
| 26 | +- Removed deprecated `:persistent_session_cookie_max_age` config option for `PowPersistentSession.Plug.Cookie` |
| 27 | +- Removed deprecated `:nodes` config option for `Pow.Store.Backend.MnesiaCache` |
| 28 | +- `Pow.Store.Base` macro no longer has the `Pow.Store.Backend.Base` behaviour and the methods are no longer overridable |
| 29 | +- `Pow.Plug.Session` no longer has backwards compatibility with `<= 1.0.13` session values |
0 commit comments