v0.5.26

compare changes

🚀 Enhancements

• Add Shopify Customer Account API OAuth provider (#470)
• Opt out of session plugin with loadStrategy: 'none' (#472)
• Add utility for checking outdated password hashes during login flow (#471)

🩹 Fixes

• LiveChat: Remove scope assumption with LiveChat login (#432)
• Properly handle state if cookie already exists (3a0a3e7)
• Missing code_challenge and state mismatch (#465)
• Steam 403 error when running locally (#473)
• zitadel: Don't prefix domain with https:// if another protocol is used (#475)
• UserSession type safety (#459)
• Add explicit security options to OAuth cookies to prevent state mismatch errors (#463)

📖 Documentation

• Set the auth.d.ts in shared/types/ (84f879e)
• Fix typo in README regarding Nuxt Auth Utils (#474)

🏡 Chore

• Update dependencies (00510b6)
• Use latest tsconfig format (769cb99)

❤️ Contributors

• Sébastien Chopin (@atinux)
• André Biseth (@bisand)
• Daniel Fischnaller (@fischi20)
• Geoff (@gapple)
• Syrex-o [email protected]
• Samuel Burkhard (@samydoesit)
• Yaroslav Semennikov (@ysemennikov)
• Kubo997 (@kubo997)
• Jeffrey León (@jals1212)
• Robert Stein (@SteinRobert)
• Marios Antonoudiou (@mariosant)

v0.5.25

compare changes

🚀 Enhancements

• auth0: Handle errors passed from Auth0 in query string (#456, #457)

🩹 Fixes

• module: Don't update .env if password set in runtimeConfig (#452)

🏡 Chore

• playground: Move types/ to shared/types (988dfc6)
• Update deps (9c500d9)

❤️ Contributors

• Sébastien Chopin (@atinux)
• David Ovčačík (@dovca)

v0.5.24

compare changes

🚀 Enhancements

• Add client-only load strategy (#443)

🩹 Fixes

• Keycloak: Use realmURLInternal for internal calls (#414)
• Add configurable scope to Authentik provider (#446)

🏡 Chore

• Update all deps (#448)

❤️ Contributors

• Sébastien Chopin (@atinux)
• Frédéric Delaporte (@fredericDelaporte)
• Vadim Kostin (@adinvadim)
• Piotr Kozłowski (@pkoz)

v0.5.23

compare changes

🚀 Enhancements

• Add Ory provider (#417)
• Add Roblox OAuth provider (#420)
• Add GitHub state param (#423)

🩹 Fixes

• Prevent session password in .env from being included in production builds (#419)

🏡 Chore

• Update deps (7e86ab9)

❤️ Contributors

• Tom Lewis (@tomlewis0)
• Dog (@dgxo)
• Matthew Messinger (@mattmess1221)
• Jordan Labrosse (@Jorgagu)

v0.5.22

compare changes

🚀 Enhancements

• Add Okta OAuth provider (#429)

🩹 Fixes

• keycloak: Allow fetch userinfo using internal url (#430)

📖 Documentation

• Fix missing auth.d.ts session types in server dir Nuxt 4 (#437)

🏡 Chore

• Update to return when using invalidState (60f32d8)

❤️ Contributors

• André Biseth (@bisand )
• Han (@han-linkx)
• Eckhardt (Kaizen) Dreyer (@Eckhardt-D)

v0.5.21

compare changes

🩹 Fixes

• keycloak: Allow fetch userinfo using internal url (#430)

📖 Documentation

• Fix missing auth.d.ts session types in server dir Nuxt 4 (#437)

🏡 Chore

• Update to return when using invalidState (60f32d8)

❤️ Contributors

• Han [email protected]
• Sébastien Chopin (@atinux)
• Eckhardt (Kaizen) Dreyer [email protected]

v0.5.20

compare changes

📖 Documentation

• Update readme file to fix path to OAuth provider (9d816a8)

🏡 Chore

• Fix types (#393)

❤️ Contributors

• Tejas Gavankar (@tejas161)
• Sébastien Chopin (@atinux)

v0.5.19

compare changes

🚀 Enhancements

• Add support for authorization parameters and ensure state param is included from query when present in Facebook & Microsoft OAuth (#386)

🩹 Fixes

• Explicit Return Type on getUserSession (#379)

❤️ Contributors

• Artemis Mendrinos (@mendrinos)
• Timothy Michael McMasters (@Tmmcmasters)

v0.5.18

compare changes

🚀 Enhancements

• Support GitHub Enterprise Server and GHE.com (#383)
• Add Salesforce, Slack and Heroku OAuth providers (#382)

❤️ Contributors

• Phof (@phof)
• Alain Hélaïli (@helaili)

v0.5.17

compare changes

🚀 Enhancements

• Add LiveChat OAuth (#376)
• Add Azure b2c OAuth provider (#362)
• Add Kick OAuth provider (#360)

🩹 Fixes

• Verify steam credentials (#365)
• Remove ohash dependency (#377)
• oauth, apple: Return tokens in response (#373)
• oauth, facebook: Prevent duplication of config.fields and config.scope in defu merge (#375)

❤️ Contributors

• Ahmed Rangel (@ahmedrangel)
• Nathan Rowe (@n-rowe)
• Artemis Mendrinos (@mendrinos)
• Dominik Opyd (@oritwoen)
• Indrek Ardel (@Ingramz)
• Marios Antonoudiou (@mariosant)
• NiTrO0FuN (@NiTrO0FuN)