v1.20.1

What's Changed

• fix: null OAuth email behavior by @diegosperes in #259

Full Changelog: v1.20.0...v1.20.1

v1.20.0

What's Changed

• Fix links in readme by @cornerman in #256
• Oauth unlink social accounts by @diegosperes in #253

Full Changelog: v1.19.0...v1.20.0

v1.19.0

What's Changed

• oauth: add sign-in with apple support (fixes #110) by @AlexCuse in #243

Full Changelog: v1.18.2...v1.19.0

v1.18.2

What's Changed

• Revert "oauth: get signing key from provider (#236)" by @AlexCuse in #250

Full Changelog: v1.18.1...v1.18.2

v1.18.1

What's Changed

• oauth: get signing key from provider by @AlexCuse in #236
• CI: update maintained actions to eliminate node warnings by @AlexCuse in #237
• chore: migrate deprecated ioutil usage to io package by @AlexCuse in #238
• chore: use github.com/go-jose/go-jose/v3 over deprecated square package by @AlexCuse in #240
• Remove duplicate print of PUBLIC_PORT by @cornerman in #242
• Bugfix: authn initiates user login upon connection attempt by @diegosperes in #246
• Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #244
• prepare 1.18.1 by @AlexCuse in #247

New Contributors

• @cornerman made their first contribution in #242
• @diegosperes made their first contribution in #246

Full Changelog: v1.18.0...v1.18.1

v1.18.0

What's Changed

• feat: add support for TOTP multi-factor authentication by @AlexCuse in #220
• Bump golang.org/x/crypto from 0.0.0-20200622213623-75b288015ac9 to 0.1.0 by @dependabot in #228
• Bump github.com/prometheus/client_golang from 0.9.0-pre1 to 1.11.1 by @dependabot in #229
• admin: clear TOTP secret when expiring password by @AlexCuse in #231
• claims: add amr for authentication method by @AlexCuse in #230
• Bump golang.org/x/crypto from 0.1.0 to 0.17.0 by @dependabot in #233
• prepare 1.18.0 by @AlexCuse in #232

Full Changelog: v1.17.1...v1.18.0

v1.17.1

prepare 1.17.1 (#219)

v1.17.0

What's Changed

• session: add option to use explicit expiry for refresh token cookies by @AlexCuse in #208

Full Changelog: v1.16.0...v1.17.0

v1.16.0

Added

• Usernames may not be passwords [#200]
• ID token contains Session ID claim (sid) [#205]

v1.15.0

Added

• Added /jwks to both public and private routes [#198]