Jamie Howard
16559ac3c8
fix(users-permissions): implement session revocation on password changes ( #25168 )
2026-01-13 09:41:45 +01:00
Jamie Howard
3d65d99e83
[Community PR] support httpOnly cookie for refresh token ( #24954 )
...
* fix(users-permissions): support httpOnly cookie for refresh token in /auth/refresh endpoint
* test(auth): reduce duplication in test
* test(auth): further duplication reduction
2026-01-09 09:10:20 +00:00
Jamie Howard
91f3ae970f
enhancement: cookie security configuration ( #24524 )
2025-10-14 09:15:09 +02:00
723a2f0c62
fix: support auth.options config in sessions ( #24460 )
...
* fix: support auth.options config in sessions
* chore: fix lint
* feat(users-permissions): add jwt algorithm configuration
* refactor: remove deprecated admin.auth.options warnings
* test(token): add TypeScript error suppression for mock config in token tests
* feat(bootstrap): re-add warning for deprecated expiresIn option in session settings
---------
Co-authored-by: Jamie Howard <jhoward1994@gmail.com >
Co-authored-by: Jamie Howard <48524071+jhoward1994@users.noreply.github.com >
2025-09-29 16:58:18 +03:00
Jamie Howard
d23f1485e5
feat: Advanced Session Configuration ( #24346 )
2025-09-23 12:04:29 +02:00
Ben Irvin
e07a466901
fix: validation message shape
2025-01-29 16:54:15 +01:00
Ben Irvin
360ddc95d6
test(api): password byte length
2025-01-23 15:29:52 +01:00
Ben Irvin
41f8cdf116
fix: 72 byte maximum for creating and updating passwords
2025-01-23 12:44:25 +01:00
Ben Irvin
a7cf7e50ee
fix: u&p service hashes password attributes
2024-04-18 15:58:46 +02:00
Ben Irvin
2ef71bdf4c
Merge branch 'develop' into v5/main
2024-04-02 16:25:24 +02:00
Ben Irvin
cf82c830d8
test: restructure test dirs
2024-04-02 11:19:43 +02:00
Jamie Howard
Ben Irvin