- Fix on registration bug
- Options to make JWT spec compliant, in particular
**
tokenExpires
(default false, will be true in next major) withrefreshTokenExpiry
(default 1 day),onRefreshRequest
,onRefreshRequestUser
and new routerefresh
. **specJwt
(default false, will be true in next major) puts only_id
in the token, not all user profile data. - All messages are now customizable and internationalizable (with new package
ooth-i18n
) - Various text and dependency fixes
- Increase bcrypt cost factor (
SALT_ROUNDS
) to 12.
- New package
ooth-roles
- New Pakage
ooth-profile
- Just added README.md to packages for better appearance on npmjs.com.
- License is now
MIT
in allpackage.json
files. - Added new packate
ooth-local-emailer
- Fix ooth-client-react-next-apollo - was not server-rendering!
- Fix next clients (getInitialState).
- BREAK: Node 8, react 16, apollo 2 (affecting only packages that were still in 0.X: compose-next, ooth-client-react, ooth-client-react-next, ooth-client-react-next-apollo)
- BREAK: Target engine from now on is node 8.
- BREAK: Extracted db backend, now need to initialize using
ooth-mongo
(or another backend of your choice).
- Extracted db backend from
ooth
as a standalone package.
- BREAK: Hash password reset and email validation tokens. They can't be used as keys anymore. To reset a password or validate an email, one has to pass userId parameter as well.
- Password reset and email validation tokens expire after 1 hour.
- Handle cases in which parent doesn't have initial props
- transmit original props.
- Add support for profileFields. Now only profileFields are exposed on the /status route
- Use
ObjectId
for mysql queries
- Throw on error
- Support username
- Support changing password
- Register profile fields