Skip to content

Dev to Master - First Stable Release - #77

Merged
mckaragoz merged 20 commits into
masterfrom
dev
Oct 12, 2026
Merged

mckaragoz merged 20 commits into
masterfrom
dev

Conversation

@mckaragoz

Copy link
Copy Markdown
Contributor

📘 Summary

🔍 Details

🧩 Related Issues

Link any related issues:

🛠 Changes

  • New feature
  • Bug fix
  • Refactoring - Improvement
  • Documentation
  • Samples
  • Breaking change

✔ Checklist

  • I’ve tested my changes
  • I’ve added comments or documentation where needed
  • I’ve followed the project’s coding conventions
  • I’ve validated that the API surface is stable

* Fix UserIdentifier Mutation Can be Done Across Non Targeted Users

* Fix Identifier Verifier Abuse
* fix(credentials): prevent cross-user credential reset

* fix(credentials): prevent user enumeration in reset flows

* refactor(contracts): remove unused request properties

* fix(auth): enforce supported credential types in authentication flows

* fix(contracts): align required fields and runtime validation

* fix(users): populate missing public contract fields

* test(authorization): cover role management and target consistency

* Transport PreviewReceipt on Login an TryLogin Processes

* Add Verified Username Initialization Guard on User Creation

* fix(core): enforce result invariants and standardize IsSuccess

* fix(users): enforce pagination limits and ensure consistent user queries

* refactor(auth): defer unimplemented authentication flows

* refactor(tokens): separate refresh token issuance from transport contracts

* test(core): cover JSON converters and typed identifier serialization

* fix(auth): preserve multi-valued claims across token issuance and refresh

* fix(client): ensure response validation before state events

* fix(core): enforce immutability in claims and auth snapshots

* fix(core): enforce value object invariants and serialization consistency

* fix(client): improve HTTP result mapping and problem details handling

* refactor(api): remove dormant contracts and clarify user integration architecture

* fix(server): correct ITokenIssuer abstraction namespace

* Update Architecture and AI-Guardrails

* Update Readme & Codecov

* Server Tests

* Fix Warnings

* Fix Test
* fix(credentials): enforce configurable session invalidation on credential changes and recovery

* fix(credentials): prevent account enumeration in recovery flows

* fix(credentials): prevent information disclosure in anonymous password reset

* fix(credentials): reject unsupported credential types in reset flows

* fix(users): align query sorting and stabilize pagination across providers

* fix(server): reject unsupported body delivery during response resolution
* fix(server): map invalid JSON requests to validation errors

* fix(server): normalize invalid request values to validation errors

* fix(core): unify runtime exception status codes with HTTP responses
fix(server): map resource reauthentication to challenge required

* fix(client): normalize network and PKCE authorization errors

* fix(security): propagate unexpected Argon2 verification failures
* fix: validate session touch interval against idle timeout

* fix: treat zero idle timeout as disabled

* fix(auth): align refresh token resolution with credential delivery

* fix(auth): partially prevent credential loss during failed refresh rotation

* Additional Test
Updated CI workflow to trigger on release branches and version tags.
@mckaragoz
mckaragoz merged commit e7c6147 into master Oct 12, 2026
3 checks passed

This branch was successfully deployed

1 active deployment
production — b5044c8a Deployed Oct 12, 2026 by mckaragoz via publish #7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant