authsome_flutter_ui

Changes

• chore(release): prepare Flutter packages for 1.6.1 (#44) (9099f34)
• fix(release): publish Flutter packages via pub.dev automated publishing (#42) (7c08603)
• Merge pull request #40 from xraph/security-hardening-and-store-conformance (ad9256f)
• refactor(middleware): return typed errors instead of hand-written envelopes (466c583)
• chore(ui): add eslint to the workspace, and bound the refresh retry it found (bdacdeb)
• fix(ui): default tokens to memory, and bound wildcard path matching (c76c599)
• fix(ui): fail closed when a session cannot be validated (7d741cf)
• fix(ui): derive session expiry from the server, and let the server read stored sessions (01ea416)
• chore: gitignore .claude workspace (a95aa5d)
• fix: propagate plugin init failures, honour per-method session TTLs, harden IP and single-use (350973a)
• fix(mfa): require step-up to disable, accept recovery codes, cap ticket attempts (2f5d320)
• fix(oauth2): bind codes to client, redirect_uri, scope, and PKCE (970ff61)
• fix(plugins): close magic-link token confusion and phone OTP brute-force (8db7bba)
• fix(ui/nextjs): forward client identity and harden proxy responses (74c6d9e)
• fix(ui): validate post-auth redirect targets (526cd3d)
• fix(plugins): require auth on plugin admin and management routes (d787dfd)

Installation

Go:

go get github.com/xraph/[email protected]

npm:

npm install @authsome/[email protected]
npm install @authsome/[email protected]

Flutter:

dependencies:
  authsome_flutter: ^1.6.1

What's Changed

• security: harden plugin auth surface and frontend SDKs by @juicycleff in #40
• fix(release): publish Flutter packages via pub.dev automated publishing by @juicycleff in #42
• chore(release): prepare Flutter packages for 1.6.1 by @juicycleff in #44

Full Changelog: v1.6.0...v1.6.1

• Release versioning is now unified across authsome_core, authsome_flutter and authsome_flutter_ui. All three publish from a single v{{version}} tag via pub.dev automated publishing.
• Fixed the authsome_flutter dependency constraint, which was ^0.1.0 and so could never resolve against a 1.x release. It is now ^1.6.1.

• See the GitHub releases for the changes in this and earlier versions.