v1.14.0

Added

• Added last_login_at and password_changed_at to Get Account API

v1.13.0

Added

• Support for non-default Redis user [#191]
• Support for TLS connections to Redis with rediss [#190]

v1.12.0

Added

• Update to go 1.17
• Flexible app domains with wildcard matching [#189]

v1.11.0

Added

• Support for Redis Sentinel [#181]

Fixed

• Improved validation for AUTHN_URL and other ENV url values [#178]

v1.10.4

Fixed

• Broken pipe error on Postgres [#174]

v1.10.3

Fixed

• Usernames are now case insensitive on Postgres and SQLite. This requires a migration that can fail if the existing database has unintended duplicates! [#170]

v1.10.2

Fixed

• CORS configuration allows content-type header

v1.10.1

Fixed

• added a timeout to webhook sender

v1.10.0

Added

• OAuth through Microsoft [#155]

v1.9.0

Added

• endpoint for checking zxcvbn password score [#149]
• option to expire an account's sessions after a password change [#154]

Fixed

• improvements to constant time comparison in basic auth (thanks @lsmith130)