3.0.0-RC3

Fixed

• Loosened lcobucci/jwt dependency requirements (#152)

3.0.0-RC2

Fixed

• Loosened lcobucci/jwt dependency requirements (#152)

3.0.0-RC1

Added

• Added Craft 5 support (#149)
• Added option to disable password verification when using deleteAccount mutation (#133)

Fixed

• Element query executed before Craft is fully initialized (#140)
• Inefficiency in authenticate mutation (#137)
• Fixed issue with forgottenPassword mutation sending emails for suspended users (#134)

2.5.0

Added

• Added 2FA support! See the docs (#118)

Fixed

• Fixed issue with public mutations throwing null $user errors. Thanks @robinbeatty for the PR! (#125)

2.4.0

Added

• Added ability to skip activation status on incoming requests (useful for multi-step registration flows) (#83)
• Added ability to assign JWTs to the public schema (#122)
• Added editable messages for account locked and account cooldown authentication errors (#121)

2.3.1

Fixed

• Fixed issue with users sometimes being permanently granted Control Panel access (#120)
• Fixed issue with field permissions falling back to the public schema when passing Bearer tokens (#119)

2.3.0

Added

• Added 'magic link' authentication! To get started, enable it in your plugin settings and see the docs (#107)

2.2.1

Fixed

• Fixed issue with settings breadcrumb being hardcoded to /settings (#117)

2.2.0

Added

• Added support for Microsoft OAuth sign in
• Added deleteSocialAccount mutation, for deleting password-less accounts. Throws an error if run on an account with a password (#110)

Fixed

• Fixed issue with accounts not automatically activating (#114, thanks @Stalex89!)
• Fixed issue with plugin's field restrictions not applying to public schema (#109, thanks @Zsavajji!)

2.1.2

Fixed

• Fixed issue with mutation field validation throwing an error (#103)
• Fixed issue with social registration not marking users as active if skip activation is enabled (#100)