- Update
rw-api-microservice-node
to add API Key support.
- Add
deletion
model and CRUD endpoints - Create
deletion
object on user deletion
- Update nodejs to 16.15
- Update dependencies based on yarn audit
- Upgrade node 12 -> 16.
- Improve error message when requesting a password reset for an email with an already existing social login account.
- Return 200 OK in
sign-up-redirect
endpoint whenorigin
redirect cannot be found. - Add support for hosts from
x-rw-domain
header when generating pagination links. - Update
rw-api-microservice-node
to add CORS support. - Fix issue that caused DELETE
/auth/user/:userId
to deactivate users instead of deleting them. - Add support for hosts from
referer
header when generating pagination links.
- Fix social login with token for users who don't have an email (no email from Google, Facebook or Apple).
- Fix issue with user apps not being taken into account on sign-up.
- Remove revoked token exception if token is older than less than 1h.
- Fix social login with token for users who weren't being correctly matched with Okta users.
- Update
origin
in Okta after password reset process. - Fix issues with special characters when requesting a sign-up redirect.
- Store
callbackUrl
provided in query/request body on sign up asorigin
in Okta to be used in redirect after sign in.
- Unify social login accounts for Google and Facebook.
- Add Redis cache support to reduce number of requests made to Okta on token validation.
- Fix issues with pagination.
- Remove references to first and last name across Okta code.
- Fix issue in pagination links returned from the GET users response.
- Add
sign-up-redirect
endpoint to redirect users to referrer of sign up call (stored in user). - Fix issue where some users were still being created with display name "RW API USER".
- Add call to Okta delete session endpoint on logout.
- Prefer
authorization
header overauthentication
. authentication
header support deprecated
- Add redirection to
config.publicUrl
to account forpassport-twitter
only supporting a single source host.
- Streamline response structure for user management endpoints.
- Serialize user in
/apple/token
endpoint to avoid mongoose data leakage.
- Initial commit from Control Tower's code.