- Update
rw-api-microservice-nodeto add API Key support.
- Add
deletionmodel and CRUD endpoints - Create
deletionobject on user deletion
- Update nodejs to 16.15
- Update dependencies based on yarn audit
- Upgrade node 12 -> 16.
- Improve error message when requesting a password reset for an email with an already existing social login account.
- Return 200 OK in
sign-up-redirectendpoint whenoriginredirect cannot be found. - Add support for hosts from
x-rw-domainheader when generating pagination links. - Update
rw-api-microservice-nodeto add CORS support. - Fix issue that caused DELETE
/auth/user/:userIdto deactivate users instead of deleting them. - Add support for hosts from
refererheader when generating pagination links.
- Fix social login with token for users who don't have an email (no email from Google, Facebook or Apple).
- Fix issue with user apps not being taken into account on sign-up.
- Remove revoked token exception if token is older than less than 1h.
- Fix social login with token for users who weren't being correctly matched with Okta users.
- Update
originin Okta after password reset process. - Fix issues with special characters when requesting a sign-up redirect.
- Store
callbackUrlprovided in query/request body on sign up asoriginin Okta to be used in redirect after sign in.
- Unify social login accounts for Google and Facebook.
- Add Redis cache support to reduce number of requests made to Okta on token validation.
- Fix issues with pagination.
- Remove references to first and last name across Okta code.
- Fix issue in pagination links returned from the GET users response.
- Add
sign-up-redirectendpoint to redirect users to referrer of sign up call (stored in user). - Fix issue where some users were still being created with display name "RW API USER".
- Add call to Okta delete session endpoint on logout.
- Prefer
authorizationheader overauthentication. authenticationheader support deprecated
- Add redirection to
config.publicUrlto account forpassport-twitteronly supporting a single source host.
- Streamline response structure for user management endpoints.
- Serialize user in
/apple/tokenendpoint to avoid mongoose data leakage.
- Initial commit from Control Tower's code.