authsome_core

Changes

• chore(release): prepare Flutter packages for 1.6.1 (#44) (9099f34)
• fix(release): publish Flutter packages via pub.dev automated publishing (#42) (7c08603)
• Merge pull request #40 from xraph/security-hardening-and-store-conformance (ad9256f)
• refactor(middleware): return typed errors instead of hand-written envelopes (466c583)
• chore(ui): add eslint to the workspace, and bound the refresh retry it found (bdacdeb)
• fix(ui): default tokens to memory, and bound wildcard path matching (c76c599)
• fix(ui): fail closed when a session cannot be validated (7d741cf)
• fix(ui): derive session expiry from the server, and let the server read stored sessions (01ea416)
• chore: gitignore .claude workspace (a95aa5d)
• fix: propagate plugin init failures, honour per-method session TTLs, harden IP and single-use (350973a)
• fix(mfa): require step-up to disable, accept recovery codes, cap ticket attempts (2f5d320)
• fix(oauth2): bind codes to client, redirect_uri, scope, and PKCE (970ff61)
• fix(plugins): close magic-link token confusion and phone OTP brute-force (8db7bba)
• fix(ui/nextjs): forward client identity and harden proxy responses (74c6d9e)
• fix(ui): validate post-auth redirect targets (526cd3d)
• fix(plugins): require auth on plugin admin and management routes (d787dfd)

Installation

Go:

go get github.com/xraph/[email protected]

npm:

npm install @authsome/[email protected]
npm install @authsome/[email protected]

Flutter:

dependencies:
  authsome_flutter: ^1.6.1

What's Changed

• security: harden plugin auth surface and frontend SDKs by @juicycleff in #40
• fix(release): publish Flutter packages via pub.dev automated publishing by @juicycleff in #42
• chore(release): prepare Flutter packages for 1.6.1 by @juicycleff in #44

Full Changelog: v1.6.0...v1.6.1

• Release versioning is now unified across authsome_core, authsome_flutter and authsome_flutter_ui. All three publish from a single v{{version}} tag via pub.dev automated publishing.

Changes

• fix(cookies): add #nosec comments to clarify security settings in session cookie templates (cd3e055)
• fix(cookies): add #nosec comments to clarify security settings in cookie templates (b67c2fd)
• fix(tests): update HTTP request creation to use context-aware methods across multiple test files (cc72379)
• fix(tests): update HTTP request creation to use context-aware methods in signup tests refactor(cookies): streamline cookie creation in setSessionCookie and deleteSessionCookie functions fix(cookies): return cookie object in SessionCookieTemplate for consistency fix(contributor): simplify error messages in writeFragment function (502616f)
• fix(tests): remove unused request parameter in HTTP handlers (7554c64)
• Refactor error handling and improve code clarity across multiple files (65177e3)
• feat(rbac): add envIDToNamespace function for environment ID conversion (4f43d4a)
• Merge branch 'main' of github.com:xraph/authsome (05f20c7)
• fix(dependencies): update module versions in go.mod and go.sum for compatibility (788432c)
• Merge pull request #32 from xraph/github-fix (a5555c3)
• chore: run formatter after merging main (24bad9f)
• Merge origin/main and resolve conflicts preferring main (42e0027)
• Delete .claude/settings.local.json (b750692)
• chore(settings): removed uselss file (cadeed4)
• fix:ctx param (4190440)
• fix:ci issues (4ab3287)
• fix:fetch github user email (fdd926a)

Installation

Go:

go get github.com/xraph/[email protected]

npm:

npm install @authsome/[email protected]
npm install @authsome/[email protected]

Flutter:

dependencies:
  authsome_flutter: ^1.5.0

What's Changed

• Main by @jaymesC in #32

New Contributors

• @jaymesC made their first contribution in #32

Full Changelog: v1.4.2...v1.5.0

• See the GitHub releases for the changes in this and earlier versions.