mirror of
https://github.com/logto-io/logto.git
synced 2025-03-31 22:51:25 -05:00
release: version packages (#5684)
This commit is contained in:
silverhand-bot
GitHub
parent
a6582b208c
commit
7b5a4e3fb4
58 changed files with 365 additions and 275 deletions
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Bug fix: organization invitation APIs should handle invitee emails case insensitively
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
---
|
||||
"@logto/connector-oauth": minor
|
||||
"@logto/connector-oidc": minor
|
||||
---
|
||||
|
||||
Support `client_secret_basic` and `client_secret_jwt` token endpoint auth method for oauth & oidc connectors
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Management API will not return 500 in production for status codes that are not listed in the OpenAPI spec
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/core": minor
|
||||
---
|
||||
|
||||
add support for Redis Cluster and extra TLS options for Redis connections
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
---
|
||||
"@logto/schemas": minor
|
||||
"@logto/core": minor
|
||||
"@logto/console": minor
|
||||
---
|
||||
|
||||
refactor the definition of hook event types
|
||||
|
||||
- Add `DataHook` event types. `DataHook` are triggered by data changes.
|
||||
- Add "interaction" prefix to existing hook event types. Interaction hook events are triggered by end user interactions, e.g. completing sign-in.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
---
|
||||
'@logto/core': patch
|
||||
---
|
||||
|
||||
Fix OIDC AccessDenied error code to 403.
|
||||
|
||||
This error may happen when you try to grant an access token to a user lacking the required permissions, especially when granting for orgnization related resources. The error code should be 403 instead of 400.
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
---
|
||||
"@logto/integration-tests": patch
|
||||
"@logto/phrases": patch
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Not allow to modify management API resource through API.
|
||||
|
||||
Previously, management API resource and its scopes are readonly in Console. But it was possible to modify through the API. This is not allowed anymore.
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
---
|
||||
"@logto/experience": patch
|
||||
---
|
||||
|
||||
fix native social sign-in callback
|
||||
|
||||
In a native environment, the social sign-in callback that posts to the native container (e.g. WKWebView in iOS) was wrong.
|
||||
|
||||
This was introduced by a refactor in #5536: It updated the callback path from `/sign-in/social/:connectorId` to `/callback/social/:connectorId`. However, the function to post the message to the native container was not updated accordingly.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Sign out user after deletion or suspension
|
||||
|
||||
When a user is deleted or suspended through Management API, they should be signed out immediately, including sessions and refresh tokens.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/app-insights": patch
|
||||
---
|
||||
|
||||
allow additional telemetry for `trackException()`
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
implement request ID for API requests
|
||||
|
||||
- All requests will now include a request ID in the headers (`Logto-Core-Request-Id`)
|
||||
- Terminal logs will now include the request ID as the prefix
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
---
|
||||
"@logto/schemas": minor
|
||||
"@logto/core": minor
|
||||
---
|
||||
|
||||
support organization custom data
|
||||
|
||||
Now you can save additional data associated with the organization with the organization-level `customData` field by:
|
||||
|
||||
- Edit in the Console organization details page.
|
||||
- Specify `customData` field when using organization Management APIs.
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
---
|
||||
"@logto/console": minor
|
||||
"@logto/core": minor
|
||||
---
|
||||
|
||||
enable custom JWT feature for OSS version
|
||||
|
||||
OSS version users can now use custom JWT feature to add custom claims to JWT access tokens payload (previously, this feature was only available to Logto Cloud).
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
---
|
||||
"@logto/console": minor
|
||||
---
|
||||
|
||||
support adding API resource permissions to organization roles and organization permissions in 3rd-party applications
|
||||
|
||||
## Updates
|
||||
|
||||
- Separated the "Organization template" from the "Organization" page, establishing it as a standalone page for clearer navigation and functionality.
|
||||
- Enhanced the "Organization template" page by adding functionality that allows users to click on an organization role, which then navigates to the organization role details page where users can view its corresponding permissions and general settings.
|
||||
- Enabled the assignment of API resource permissions directly from the organization role details page, improving role management and access control.
|
||||
- Split the permission list for third-party apps into two separate lists: user permissions and organization permissions. Users can now add user profile permissions and API resource permissions for users under user permissions, and add organization permissions and API resource permissions for organizations under organization permissions.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
---
|
||||
"@logto/shared": patch
|
||||
---
|
||||
|
||||
add `normalizeError` method to `@logto/shared` package
|
||||
|
||||
Use this method to normalize error objects for logging. This method is useful for logging errors in a consistent format.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/connector-huggingface": minor
|
||||
---
|
||||
|
||||
add Hugging Face social connector
|
||||
|
|
@ -1,29 +0,0 @@
|
|||
---
|
||||
"@logto/experience": patch
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
fix the new user from SSO register hook event not triggering bug
|
||||
|
||||
### Issue
|
||||
|
||||
When a new user registers via SSO, the `PostRegister` interaction hook event is not triggered. `PostSignIn` event is mistakenly triggered instead.
|
||||
|
||||
### Root Cause
|
||||
|
||||
In the SSO `post /api/interaction/sso/:connectionId/registration` API, we update the interaction event to `Register`.
|
||||
However, the hook middleware reads the event from interaction session ahead of the API logic, and the event is not updated resulting in the wrong event being triggered.
|
||||
|
||||
In the current interaction API design, we should mutate the interaction event by calling the `PUT /api/interaction/event` API, instead of updating the event directly in the submit interaction APIs. (Just like the no direct mutation rule for a react state). So we can ensure the correct side effect like logs and hooks are triggered properly.
|
||||
|
||||
All the other sign-in methods are using the `PUT /api/interaction/event` API to update the event. But when implementing the SSO registration API, we were trying to reduce the API requests and directly updated the event in the registration API which will submit the interaction directly.
|
||||
|
||||
### Solution
|
||||
|
||||
Remove the event update logic in the SSO registration API and call the `PUT /api/interaction/event` API to update the event.
|
||||
This will ensure the correct event is triggered in the hook middleware.
|
||||
|
||||
### Action Items
|
||||
|
||||
Align the current interaction API design for now.
|
||||
Need to improve the session/interaction API logic to simplify the whole process.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
fix a bug that prevents invitee from accepting the organization invitation if the email letter case is not matching
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
---
|
||||
"@logto/connector-github": minor
|
||||
---
|
||||
|
||||
fetch GitHub account's private email address list and pick the verified primary email as a fallback
|
||||
|
||||
- Add `user:email` as part of default scope to fetch GitHub account's private email address list
|
||||
- Pick the verified primary email among private email address list as a fallback if the user does not set a public email for GitHub account
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Support comma separated resource parameter
|
||||
|
||||
Some third-party libraries or plugins do not support array of resources, and can only specify `resource` through `additionalParameters` config, e.g. `flutter-appauth`. However, only one resource can be specified at a time in this way. This PR enables comma separated resource parameter support in Logto core service, so that multiple resources can be specified via a single string.
|
||||
|
||||
For example: Auth URL like `/oidc/auth?resource=https://example.com/api1,https://example.com/api2` will be interpreted and parsed to Logto core service as `/ordc/auth?resource=https://example.com/api1&resource=https://example.com/api2`.
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Provide management API to fetch user organization scopes based on user organization roles
|
||||
|
||||
- GET `organizations/:id/users/:userId/scopes`
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
---
|
||||
"@logto/phrases": patch
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
Fix file upload API.
|
||||
|
||||
The `koa-body` has been upgraded to the latest version, which caused the file upload API to break. This change fixes the issue.
|
||||
|
||||
The `ctx.request.files.file` in the new version is an array, so the code has been updated to pick the first one.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/console": patch
|
||||
---
|
||||
|
||||
Add Java Spring Boot web integration guide to the application creation page
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
---
|
||||
"@logto/app-insights": major
|
||||
---
|
||||
|
||||
remove application insights for react
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
---
|
||||
"@logto/core": patch
|
||||
---
|
||||
|
||||
fix a bug that API resource indicator does not work if the indicator is not followed by a trailing slash or a pathname
|
||||
|
||||
- Bump `oidc-provider@8.4.6` to fix the above issue
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
---
|
||||
"@logto/core": minor
|
||||
---
|
||||
|
||||
update token grant to support organization API resources
|
||||
|
||||
Organization roles can be assigned with scopes (permissions) from the API resources, and the token grant now supports this.
|
||||
|
||||
Once the user is consent to an application with "resources" assigned, the token grant will now include the scopes inherited from all assigned organization roles.
|
||||
|
||||
Users can narrow down the scopes by passing `organization_id` when granting an access token, and the token will only include the scopes from the organization roles of the specified organization, the access token will contain an extra claim `organization_id` to indicate the organization the token is granted for. Then the resource server can use this claim to protect the resource with additional organization-level authorization.
|
||||
|
||||
This change is backward compatible, and the existing token grant will continue to work as before.
|
||||
|
|
@ -1,5 +1,15 @@
|
|||
# @logto/app-insights
|
||||
|
||||
## 2.0.0
|
||||
|
||||
### Major Changes
|
||||
|
||||
- c1c746bca: remove application insights for react
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- a9ccfc738: allow additional telemetry for `trackException()`
|
||||
|
||||
## 1.4.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/app-insights",
|
||||
"version": "1.4.0",
|
||||
"version": "2.0.0",
|
||||
"main": "lib/index.js",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"license": "MPL-2.0",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,18 @@
|
|||
# Change Log
|
||||
|
||||
## 1.16.0
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [21bb35b12]
|
||||
- Updated dependencies [5b03030de]
|
||||
- Updated dependencies [e8c41b164]
|
||||
- Updated dependencies [21bb35b12]
|
||||
- Updated dependencies [3486b12e8]
|
||||
- @logto/schemas@1.16.0
|
||||
- @logto/phrases@1.10.1
|
||||
- @logto/shared@3.1.1
|
||||
|
||||
## 1.15.0
|
||||
|
||||
### Patch Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/cli",
|
||||
"version": "1.15.0",
|
||||
"version": "1.16.0",
|
||||
"description": "Logto CLI.",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"homepage": "https://github.com/logto-io/logto#readme",
|
||||
|
|
@ -45,10 +45,10 @@
|
|||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/core-kit": "workspace:^2.4.0",
|
||||
"@logto/language-kit": "workspace:^1.1.0",
|
||||
"@logto/phrases": "workspace:^1.10.0",
|
||||
"@logto/phrases": "workspace:^1.10.1",
|
||||
"@logto/phrases-experience": "workspace:^1.6.1",
|
||||
"@logto/schemas": "workspace:1.15.0",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/schemas": "workspace:1.16.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@silverhand/essentials": "^2.9.0",
|
||||
"@silverhand/slonik": "31.0.0-beta.2",
|
||||
"chalk": "^5.0.0",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,14 @@
|
|||
# @logto/connector-github
|
||||
|
||||
## 1.4.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- 0227822b2: fetch GitHub account's private email address list and pick the verified primary email as a fallback
|
||||
|
||||
- Add `user:email` as part of default scope to fetch GitHub account's private email address list
|
||||
- Pick the verified primary email among private email address list as a fallback if the user does not set a public email for GitHub account
|
||||
|
||||
## 1.3.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/connector-github",
|
||||
"version": "1.3.0",
|
||||
"version": "1.4.0",
|
||||
"description": "Github web connector implementation.",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"dependencies": {
|
||||
|
|
|
|||
12
packages/connectors/connector-huggingface/CHANGELOG.md
Normal file
12
packages/connectors/connector-huggingface/CHANGELOG.md
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
# @logto/connector-huggingface
|
||||
|
||||
## 0.1.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- 3e5ffc499: add Hugging Face social connector
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [f9c7a72d5]
|
||||
- @logto/connector-oauth@1.3.0
|
||||
|
|
@ -1,11 +1,11 @@
|
|||
{
|
||||
"name": "@logto/connector-huggingface",
|
||||
"version": "0.0.0",
|
||||
"version": "0.1.0",
|
||||
"description": "Hugging Face connector implementation.",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"dependencies": {
|
||||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/connector-oauth": "workspace:^1.2.0",
|
||||
"@logto/connector-oauth": "workspace:^1.3.0",
|
||||
"@silverhand/essentials": "^2.9.0",
|
||||
"ky": "^1.2.3",
|
||||
"zod": "^3.22.4"
|
||||
|
|
|
|||
|
|
@ -1,5 +1,16 @@
|
|||
# @logto/connector-oauth
|
||||
|
||||
## 1.3.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- f9c7a72d5: Support `client_secret_basic` and `client_secret_jwt` token endpoint auth method for oauth & oidc connectors
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [21bb35b12]
|
||||
- @logto/shared@3.1.1
|
||||
|
||||
## 1.2.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,11 +1,11 @@
|
|||
{
|
||||
"name": "@logto/connector-oauth",
|
||||
"version": "1.2.0",
|
||||
"version": "1.3.0",
|
||||
"description": "OAuth standard connector implementation.",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"dependencies": {
|
||||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@silverhand/essentials": "^2.9.0",
|
||||
"jose": "^5.0.0",
|
||||
"ky": "^1.2.3",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,18 @@
|
|||
# @logto/connector-oidc
|
||||
|
||||
## 1.3.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- f9c7a72d5: Support `client_secret_basic` and `client_secret_jwt` token endpoint auth method for oauth & oidc connectors
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [f9c7a72d5]
|
||||
- Updated dependencies [21bb35b12]
|
||||
- @logto/connector-oauth@1.3.0
|
||||
- @logto/shared@3.1.1
|
||||
|
||||
## 1.2.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,11 +1,11 @@
|
|||
{
|
||||
"name": "@logto/connector-oidc",
|
||||
"version": "1.2.0",
|
||||
"version": "1.3.0",
|
||||
"description": "OIDC standard connector implementation.",
|
||||
"dependencies": {
|
||||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/connector-oauth": "workspace:^1.2.0",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/connector-oauth": "workspace:^1.3.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@silverhand/essentials": "^2.9.0",
|
||||
"jose": "^5.0.0",
|
||||
"ky": "^1.2.3",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,31 @@
|
|||
# Change Log
|
||||
|
||||
## 1.14.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- 21bb35b12: refactor the definition of hook event types
|
||||
|
||||
- Add `DataHook` event types. `DataHook` are triggered by data changes.
|
||||
- Add "interaction" prefix to existing hook event types. Interaction hook events are triggered by end user interactions, e.g. completing sign-in.
|
||||
|
||||
- 5872172cb: enable custom JWT feature for OSS version
|
||||
|
||||
OSS version users can now use custom JWT feature to add custom claims to JWT access tokens payload (previously, this feature was only available to Logto Cloud).
|
||||
|
||||
- 6fe6f87bc: support adding API resource permissions to organization roles and organization permissions in 3rd-party applications
|
||||
|
||||
## Updates
|
||||
|
||||
- Separated the "Organization template" from the "Organization" page, establishing it as a standalone page for clearer navigation and functionality.
|
||||
- Enhanced the "Organization template" page by adding functionality that allows users to click on an organization role, which then navigates to the organization role details page where users can view its corresponding permissions and general settings.
|
||||
- Enabled the assignment of API resource permissions directly from the organization role details page, improving role management and access control.
|
||||
- Split the permission list for third-party apps into two separate lists: user permissions and organization permissions. Users can now add user profile permissions and API resource permissions for users under user permissions, and add organization permissions and API resource permissions for organizations under organization permissions.
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- 9cf03c8ed: Add Java Spring Boot web integration guide to the application creation page
|
||||
|
||||
## 1.13.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/console",
|
||||
"version": "1.13.0",
|
||||
"version": "1.14.0",
|
||||
"description": "> TODO: description",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"homepage": "https://github.com/logto-io/logto#readme",
|
||||
|
|
@ -31,11 +31,11 @@
|
|||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/core-kit": "workspace:^2.4.0",
|
||||
"@logto/language-kit": "workspace:^1.1.0",
|
||||
"@logto/phrases": "workspace:^1.10.0",
|
||||
"@logto/phrases": "workspace:^1.10.1",
|
||||
"@logto/phrases-experience": "workspace:^1.6.1",
|
||||
"@logto/react": "^3.0.8",
|
||||
"@logto/schemas": "workspace:^1.15.0",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/schemas": "workspace:^1.16.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@mdx-js/react": "^1.6.22",
|
||||
"@monaco-editor/react": "^4.6.0",
|
||||
"@parcel/compressor-brotli": "2.9.3",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,123 @@
|
|||
# Change Log
|
||||
|
||||
## 1.16.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- 8ef021fb3: add support for Redis Cluster and extra TLS options for Redis connections
|
||||
- 21bb35b12: refactor the definition of hook event types
|
||||
|
||||
- Add `DataHook` event types. `DataHook` are triggered by data changes.
|
||||
- Add "interaction" prefix to existing hook event types. Interaction hook events are triggered by end user interactions, e.g. completing sign-in.
|
||||
|
||||
- e8c41b164: support organization custom data
|
||||
|
||||
Now you can save additional data associated with the organization with the organization-level `customData` field by:
|
||||
|
||||
- Edit in the Console organization details page.
|
||||
- Specify `customData` field when using organization Management APIs.
|
||||
|
||||
- 5872172cb: enable custom JWT feature for OSS version
|
||||
|
||||
OSS version users can now use custom JWT feature to add custom claims to JWT access tokens payload (previously, this feature was only available to Logto Cloud).
|
||||
|
||||
- 1ef32d6d5: update token grant to support organization API resources
|
||||
|
||||
Organization roles can be assigned with scopes (permissions) from the API resources, and the token grant now supports this.
|
||||
|
||||
Once the user is consent to an application with "resources" assigned, the token grant will now include the scopes inherited from all assigned organization roles.
|
||||
|
||||
Users can narrow down the scopes by passing `organization_id` when granting an access token, and the token will only include the scopes from the organization roles of the specified organization, the access token will contain an extra claim `organization_id` to indicate the organization the token is granted for. Then the resource server can use this claim to protect the resource with additional organization-level authorization.
|
||||
|
||||
This change is backward compatible, and the existing token grant will continue to work as before.
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- 52df3ebbb: Bug fix: organization invitation APIs should handle invitee emails case insensitively
|
||||
- 368385b93: Management API will not return 500 in production for status codes that are not listed in the OpenAPI spec
|
||||
- d54530356: Fix OIDC AccessDenied error code to 403.
|
||||
|
||||
This error may happen when you try to grant an access token to a user lacking the required permissions, especially when granting for orgnization related resources. The error code should be 403 instead of 400.
|
||||
|
||||
- 5b03030de: Not allow to modify management API resource through API.
|
||||
|
||||
Previously, management API resource and its scopes are readonly in Console. But it was possible to modify through the API. This is not allowed anymore.
|
||||
|
||||
- 5660c54cb: Sign out user after deletion or suspension
|
||||
|
||||
When a user is deleted or suspended through Management API, they should be signed out immediately, including sessions and refresh tokens.
|
||||
|
||||
- a9ccfc738: implement request ID for API requests
|
||||
|
||||
- All requests will now include a request ID in the headers (`Logto-Core-Request-Id`)
|
||||
- Terminal logs will now include the request ID as the prefix
|
||||
|
||||
- bbd399e15: fix the new user from SSO register hook event not triggering bug
|
||||
|
||||
### Issue
|
||||
|
||||
When a new user registers via SSO, the `PostRegister` interaction hook event is not triggered. `PostSignIn` event is mistakenly triggered instead.
|
||||
|
||||
### Root Cause
|
||||
|
||||
In the SSO `post /api/interaction/sso/:connectionId/registration` API, we update the interaction event to `Register`.
|
||||
However, the hook middleware reads the event from interaction session ahead of the API logic, and the event is not updated resulting in the wrong event being triggered.
|
||||
|
||||
In the current interaction API design, we should mutate the interaction event by calling the `PUT /api/interaction/event` API, instead of updating the event directly in the submit interaction APIs. (Just like the no direct mutation rule for a react state). So we can ensure the correct side effect like logs and hooks are triggered properly.
|
||||
|
||||
All the other sign-in methods are using the `PUT /api/interaction/event` API to update the event. But when implementing the SSO registration API, we were trying to reduce the API requests and directly updated the event in the registration API which will submit the interaction directly.
|
||||
|
||||
### Solution
|
||||
|
||||
Remove the event update logic in the SSO registration API and call the `PUT /api/interaction/event` API to update the event.
|
||||
This will ensure the correct event is triggered in the hook middleware.
|
||||
|
||||
### Action Items
|
||||
|
||||
Align the current interaction API design for now.
|
||||
Need to improve the session/interaction API logic to simplify the whole process.
|
||||
|
||||
- b4b8015db: fix a bug that prevents invitee from accepting the organization invitation if the email letter case is not matching
|
||||
- b575f57ac: Support comma separated resource parameter
|
||||
|
||||
Some third-party libraries or plugins do not support array of resources, and can only specify `resource` through `additionalParameters` config, e.g. `flutter-appauth`. However, only one resource can be specified at a time in this way. This PR enables comma separated resource parameter support in Logto core service, so that multiple resources can be specified via a single string.
|
||||
|
||||
For example: Auth URL like `/oidc/auth?resource=https://example.com/api1,https://example.com/api2` will be interpreted and parsed to Logto core service as `/ordc/auth?resource=https://example.com/api1&resource=https://example.com/api2`.
|
||||
|
||||
- aacbebcbc: Provide management API to fetch user organization scopes based on user organization roles
|
||||
|
||||
- GET `organizations/:id/users/:userId/scopes`
|
||||
|
||||
- 3486b12e8: Fix file upload API.
|
||||
|
||||
The `koa-body` has been upgraded to the latest version, which caused the file upload API to break. This change fixes the issue.
|
||||
|
||||
The `ctx.request.files.file` in the new version is an array, so the code has been updated to pick the first one.
|
||||
|
||||
- ead2abde6: fix a bug that API resource indicator does not work if the indicator is not followed by a trailing slash or a pathname
|
||||
|
||||
- Bump `oidc-provider@8.4.6` to fix the above issue
|
||||
|
||||
- Updated dependencies [21bb35b12]
|
||||
- Updated dependencies [5b03030de]
|
||||
- Updated dependencies [b80934ac5]
|
||||
- Updated dependencies [a9ccfc738]
|
||||
- Updated dependencies [e8c41b164]
|
||||
- Updated dependencies [5872172cb]
|
||||
- Updated dependencies [6fe6f87bc]
|
||||
- Updated dependencies [21bb35b12]
|
||||
- Updated dependencies [bbd399e15]
|
||||
- Updated dependencies [3486b12e8]
|
||||
- Updated dependencies [9cf03c8ed]
|
||||
- Updated dependencies [c1c746bca]
|
||||
- @logto/schemas@1.16.0
|
||||
- @logto/console@1.14.0
|
||||
- @logto/phrases@1.10.1
|
||||
- @logto/experience@1.6.1
|
||||
- @logto/app-insights@2.0.0
|
||||
- @logto/shared@3.1.1
|
||||
- @logto/cli@1.16.0
|
||||
|
||||
## 1.15.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/core",
|
||||
"version": "1.15.0",
|
||||
"version": "1.16.0",
|
||||
"description": "The open source identity solution.",
|
||||
"main": "build/index.js",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
|
|
@ -31,18 +31,18 @@
|
|||
"@google-cloud/storage": "^7.10.0",
|
||||
"@koa/cors": "^5.0.0",
|
||||
"@logto/affiliate": "^0.1.0",
|
||||
"@logto/app-insights": "workspace:^1.4.0",
|
||||
"@logto/cli": "workspace:^1.15.0",
|
||||
"@logto/app-insights": "workspace:^2.0.0",
|
||||
"@logto/cli": "workspace:^1.16.0",
|
||||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/console": "workspace:*",
|
||||
"@logto/core-kit": "workspace:^2.4.0",
|
||||
"@logto/demo-app": "workspace:*",
|
||||
"@logto/experience": "workspace:*",
|
||||
"@logto/language-kit": "workspace:^1.1.0",
|
||||
"@logto/phrases": "workspace:^1.10.0",
|
||||
"@logto/phrases": "workspace:^1.10.1",
|
||||
"@logto/phrases-experience": "workspace:^1.6.1",
|
||||
"@logto/schemas": "workspace:^1.15.0",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/schemas": "workspace:^1.16.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@silverhand/essentials": "^2.9.0",
|
||||
"@silverhand/slonik": "31.0.0-beta.2",
|
||||
"@simplewebauthn/server": "^10.0.0",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,11 @@
|
|||
# Change Log
|
||||
|
||||
## 1.16.0
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- @logto/cli@1.16.0
|
||||
|
||||
## 1.15.0
|
||||
|
||||
### Patch Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/create",
|
||||
"version": "1.15.0",
|
||||
"version": "1.16.0",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"license": "MPL-2.0",
|
||||
"type": "module",
|
||||
|
|
@ -15,6 +15,6 @@
|
|||
"node": "^20.9.0"
|
||||
},
|
||||
"dependencies": {
|
||||
"@logto/cli": "workspace:^1.15.0"
|
||||
"@logto/cli": "workspace:^1.16.0"
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,5 +1,40 @@
|
|||
# Change Log
|
||||
|
||||
## 1.6.1
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- b80934ac5: fix native social sign-in callback
|
||||
|
||||
In a native environment, the social sign-in callback that posts to the native container (e.g. WKWebView in iOS) was wrong.
|
||||
|
||||
This was introduced by a refactor in #5536: It updated the callback path from `/sign-in/social/:connectorId` to `/callback/social/:connectorId`. However, the function to post the message to the native container was not updated accordingly.
|
||||
|
||||
- bbd399e15: fix the new user from SSO register hook event not triggering bug
|
||||
|
||||
### Issue
|
||||
|
||||
When a new user registers via SSO, the `PostRegister` interaction hook event is not triggered. `PostSignIn` event is mistakenly triggered instead.
|
||||
|
||||
### Root Cause
|
||||
|
||||
In the SSO `post /api/interaction/sso/:connectionId/registration` API, we update the interaction event to `Register`.
|
||||
However, the hook middleware reads the event from interaction session ahead of the API logic, and the event is not updated resulting in the wrong event being triggered.
|
||||
|
||||
In the current interaction API design, we should mutate the interaction event by calling the `PUT /api/interaction/event` API, instead of updating the event directly in the submit interaction APIs. (Just like the no direct mutation rule for a react state). So we can ensure the correct side effect like logs and hooks are triggered properly.
|
||||
|
||||
All the other sign-in methods are using the `PUT /api/interaction/event` API to update the event. But when implementing the SSO registration API, we were trying to reduce the API requests and directly updated the event in the registration API which will submit the interaction directly.
|
||||
|
||||
### Solution
|
||||
|
||||
Remove the event update logic in the SSO registration API and call the `PUT /api/interaction/event` API to update the event.
|
||||
This will ensure the correct event is triggered in the hook middleware.
|
||||
|
||||
### Action Items
|
||||
|
||||
Align the current interaction API design for now.
|
||||
Need to improve the session/interaction API logic to simplify the whole process.
|
||||
|
||||
## 1.6.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/experience",
|
||||
"version": "1.6.0",
|
||||
"version": "1.6.1",
|
||||
"license": "MPL-2.0",
|
||||
"type": "module",
|
||||
"private": true,
|
||||
|
|
@ -24,9 +24,9 @@
|
|||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/core-kit": "workspace:^2.4.0",
|
||||
"@logto/language-kit": "workspace:^1.1.0",
|
||||
"@logto/phrases": "workspace:^1.10.0",
|
||||
"@logto/phrases": "workspace:^1.10.1",
|
||||
"@logto/phrases-experience": "workspace:^1.6.1",
|
||||
"@logto/schemas": "workspace:^1.15.0",
|
||||
"@logto/schemas": "workspace:^1.16.0",
|
||||
"@parcel/compressor-brotli": "2.9.3",
|
||||
"@parcel/compressor-gzip": "2.9.3",
|
||||
"@parcel/core": "2.9.3",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,13 @@
|
|||
# Change Log
|
||||
|
||||
## 1.6.1
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- 5b03030de: Not allow to modify management API resource through API.
|
||||
|
||||
Previously, management API resource and its scopes are readonly in Console. But it was possible to modify through the API. This is not allowed anymore.
|
||||
|
||||
## 1.6.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/integration-tests",
|
||||
"version": "1.6.0",
|
||||
"version": "1.6.1",
|
||||
"description": "Integration tests for Logto.",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"license": "MPL-2.0",
|
||||
|
|
@ -28,8 +28,8 @@
|
|||
"@logto/core-kit": "workspace:^",
|
||||
"@logto/js": "^4.1.1",
|
||||
"@logto/node": "^2.4.7",
|
||||
"@logto/schemas": "workspace:^1.15.0",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/schemas": "workspace:^1.16.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@silverhand/eslint-config": "6.0.1",
|
||||
"@silverhand/essentials": "^2.9.0",
|
||||
"@silverhand/ts-config": "6.0.0",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,19 @@
|
|||
# Change Log
|
||||
|
||||
## 1.10.1
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- 5b03030de: Not allow to modify management API resource through API.
|
||||
|
||||
Previously, management API resource and its scopes are readonly in Console. But it was possible to modify through the API. This is not allowed anymore.
|
||||
|
||||
- 3486b12e8: Fix file upload API.
|
||||
|
||||
The `koa-body` has been upgraded to the latest version, which caused the file upload API to break. This change fixes the issue.
|
||||
|
||||
The `ctx.request.files.file` in the new version is an array, so the code has been updated to pick the first one.
|
||||
|
||||
## 1.10.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/phrases",
|
||||
"version": "1.10.0",
|
||||
"version": "1.10.1",
|
||||
"description": "Logto shared phrases (i18n).",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"homepage": "https://github.com/logto-io/logto#readme",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,29 @@
|
|||
# Change Log
|
||||
|
||||
## 1.16.0
|
||||
|
||||
### Minor Changes
|
||||
|
||||
- 21bb35b12: refactor the definition of hook event types
|
||||
|
||||
- Add `DataHook` event types. `DataHook` are triggered by data changes.
|
||||
- Add "interaction" prefix to existing hook event types. Interaction hook events are triggered by end user interactions, e.g. completing sign-in.
|
||||
|
||||
- e8c41b164: support organization custom data
|
||||
|
||||
Now you can save additional data associated with the organization with the organization-level `customData` field by:
|
||||
|
||||
- Edit in the Console organization details page.
|
||||
- Specify `customData` field when using organization Management APIs.
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- Updated dependencies [5b03030de]
|
||||
- Updated dependencies [21bb35b12]
|
||||
- Updated dependencies [3486b12e8]
|
||||
- @logto/phrases@1.10.1
|
||||
- @logto/shared@3.1.1
|
||||
|
||||
## 1.15.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/schemas",
|
||||
"version": "1.15.0",
|
||||
"version": "1.16.0",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"license": "MPL-2.0",
|
||||
"type": "module",
|
||||
|
|
@ -81,9 +81,9 @@
|
|||
"@logto/connector-kit": "workspace:^3.0.0",
|
||||
"@logto/core-kit": "workspace:^2.4.0",
|
||||
"@logto/language-kit": "workspace:^1.1.0",
|
||||
"@logto/phrases": "workspace:^1.10.0",
|
||||
"@logto/phrases": "workspace:^1.10.1",
|
||||
"@logto/phrases-experience": "workspace:^1.6.1",
|
||||
"@logto/shared": "workspace:^3.1.0",
|
||||
"@logto/shared": "workspace:^3.1.1",
|
||||
"@withtyped/server": "^0.13.6"
|
||||
},
|
||||
"peerDependencies": {
|
||||
|
|
|
|||
|
|
@ -1,5 +1,13 @@
|
|||
# Change Log
|
||||
|
||||
## 3.1.1
|
||||
|
||||
### Patch Changes
|
||||
|
||||
- 21bb35b12: add `normalizeError` method to `@logto/shared` package
|
||||
|
||||
Use this method to normalize error objects for logging. This method is useful for logging errors in a consistent format.
|
||||
|
||||
## 3.1.0
|
||||
|
||||
### Minor Changes
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"name": "@logto/shared",
|
||||
"version": "3.1.0",
|
||||
"version": "3.1.1",
|
||||
"main": "lib/index.js",
|
||||
"author": "Silverhand Inc. <contact@silverhand.io>",
|
||||
"license": "MPL-2.0",
|
||||
|
|
|
|||
44
pnpm-lock.yaml
generated
44
pnpm-lock.yaml
generated
|
|
@ -92,16 +92,16 @@ importers:
|
|||
specifier: workspace:^1.1.0
|
||||
version: link:../toolkit/language-kit
|
||||
'@logto/phrases':
|
||||
specifier: workspace:^1.10.0
|
||||
specifier: workspace:^1.10.1
|
||||
version: link:../phrases
|
||||
'@logto/phrases-experience':
|
||||
specifier: workspace:^1.6.1
|
||||
version: link:../phrases-experience
|
||||
'@logto/schemas':
|
||||
specifier: workspace:1.15.0
|
||||
specifier: workspace:1.16.0
|
||||
version: link:../schemas
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../shared
|
||||
'@silverhand/essentials':
|
||||
specifier: ^2.9.0
|
||||
|
|
@ -1128,7 +1128,7 @@ importers:
|
|||
specifier: workspace:^3.0.0
|
||||
version: link:../../toolkit/connector-kit
|
||||
'@logto/connector-oauth':
|
||||
specifier: workspace:^1.2.0
|
||||
specifier: workspace:^1.3.0
|
||||
version: link:../connector-oauth2
|
||||
'@silverhand/essentials':
|
||||
specifier: ^2.9.0
|
||||
|
|
@ -1934,7 +1934,7 @@ importers:
|
|||
specifier: workspace:^3.0.0
|
||||
version: link:../../toolkit/connector-kit
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../../shared
|
||||
'@silverhand/essentials':
|
||||
specifier: ^2.9.0
|
||||
|
|
@ -2016,10 +2016,10 @@ importers:
|
|||
specifier: workspace:^3.0.0
|
||||
version: link:../../toolkit/connector-kit
|
||||
'@logto/connector-oauth':
|
||||
specifier: workspace:^1.2.0
|
||||
specifier: workspace:^1.3.0
|
||||
version: link:../connector-oauth2
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../../shared
|
||||
'@silverhand/essentials':
|
||||
specifier: ^2.9.0
|
||||
|
|
@ -2785,7 +2785,7 @@ importers:
|
|||
specifier: workspace:^1.1.0
|
||||
version: link:../toolkit/language-kit
|
||||
'@logto/phrases':
|
||||
specifier: workspace:^1.10.0
|
||||
specifier: workspace:^1.10.1
|
||||
version: link:../phrases
|
||||
'@logto/phrases-experience':
|
||||
specifier: workspace:^1.6.1
|
||||
|
|
@ -2794,10 +2794,10 @@ importers:
|
|||
specifier: ^3.0.8
|
||||
version: 3.0.8(react@18.2.0)
|
||||
'@logto/schemas':
|
||||
specifier: workspace:^1.15.0
|
||||
specifier: workspace:^1.16.0
|
||||
version: link:../schemas
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../shared
|
||||
'@mdx-js/react':
|
||||
specifier: ^1.6.22
|
||||
|
|
@ -3091,10 +3091,10 @@ importers:
|
|||
specifier: ^0.1.0
|
||||
version: 0.1.0
|
||||
'@logto/app-insights':
|
||||
specifier: workspace:^1.4.0
|
||||
specifier: workspace:^2.0.0
|
||||
version: link:../app-insights
|
||||
'@logto/cli':
|
||||
specifier: workspace:^1.15.0
|
||||
specifier: workspace:^1.16.0
|
||||
version: link:../cli
|
||||
'@logto/connector-kit':
|
||||
specifier: workspace:^3.0.0
|
||||
|
|
@ -3115,16 +3115,16 @@ importers:
|
|||
specifier: workspace:^1.1.0
|
||||
version: link:../toolkit/language-kit
|
||||
'@logto/phrases':
|
||||
specifier: workspace:^1.10.0
|
||||
specifier: workspace:^1.10.1
|
||||
version: link:../phrases
|
||||
'@logto/phrases-experience':
|
||||
specifier: workspace:^1.6.1
|
||||
version: link:../phrases-experience
|
||||
'@logto/schemas':
|
||||
specifier: workspace:^1.15.0
|
||||
specifier: workspace:^1.16.0
|
||||
version: link:../schemas
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../shared
|
||||
'@silverhand/essentials':
|
||||
specifier: ^2.9.0
|
||||
|
|
@ -3371,7 +3371,7 @@ importers:
|
|||
packages/create:
|
||||
dependencies:
|
||||
'@logto/cli':
|
||||
specifier: workspace:^1.15.0
|
||||
specifier: workspace:^1.16.0
|
||||
version: link:../cli
|
||||
|
||||
packages/demo-app:
|
||||
|
|
@ -3476,13 +3476,13 @@ importers:
|
|||
specifier: workspace:^1.1.0
|
||||
version: link:../toolkit/language-kit
|
||||
'@logto/phrases':
|
||||
specifier: workspace:^1.10.0
|
||||
specifier: workspace:^1.10.1
|
||||
version: link:../phrases
|
||||
'@logto/phrases-experience':
|
||||
specifier: workspace:^1.6.1
|
||||
version: link:../phrases-experience
|
||||
'@logto/schemas':
|
||||
specifier: workspace:^1.15.0
|
||||
specifier: workspace:^1.16.0
|
||||
version: link:../schemas
|
||||
'@parcel/compressor-brotli':
|
||||
specifier: 2.9.3
|
||||
|
|
@ -3705,10 +3705,10 @@ importers:
|
|||
specifier: ^2.4.7
|
||||
version: 2.4.7
|
||||
'@logto/schemas':
|
||||
specifier: workspace:^1.15.0
|
||||
specifier: workspace:^1.16.0
|
||||
version: link:../schemas
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../shared
|
||||
'@silverhand/eslint-config':
|
||||
specifier: 6.0.1
|
||||
|
|
@ -3851,13 +3851,13 @@ importers:
|
|||
specifier: workspace:^1.1.0
|
||||
version: link:../toolkit/language-kit
|
||||
'@logto/phrases':
|
||||
specifier: workspace:^1.10.0
|
||||
specifier: workspace:^1.10.1
|
||||
version: link:../phrases
|
||||
'@logto/phrases-experience':
|
||||
specifier: workspace:^1.6.1
|
||||
version: link:../phrases-experience
|
||||
'@logto/shared':
|
||||
specifier: workspace:^3.1.0
|
||||
specifier: workspace:^3.1.1
|
||||
version: link:../shared
|
||||
'@withtyped/server':
|
||||
specifier: ^0.13.6
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue