Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@seamless-auth/core@0.6.0

Minor Changes

• 3cf132e: Issue a session on OTP-based registration. Registration now starts with just an
  email, and verifying the registration email OTP completes sign-up and returns a
  session. The adapter previously proxied /otp/verify-email-otp and
  /otp/verify-phone-otp without setting cookies, so browser users finished
  registration unauthenticated. A new verifyRegistrationOtpHandler (core) plus a
  verifyRegistrationOtp express handler now set the session cookies on these
  routes (tolerating a phone-first step that returns no session yet), mirroring the
  login OTP verify handlers.

Patch Changes

• e52ff77: Don't crash on non-JSON upstream responses. authFetch now parses response bodies
  defensively, so a plain-text error (e.g. a rate-limited 429 Too many requests) or an
  empty body (204) no longer throws in handlers that read the body before checking the
  status — which previously surfaced as an unhandled rejection that took down the adapter
  process. Non-JSON bodies are returned as { message: <text> }; empty bodies as
  undefined. Fixes Adapter process crashes on non-JSON upstream response (unguarded up.json() in all core handlers) #41.
• 39f7aad: fix: updates core implementation to supply the authorization value during polling for magic links
• 46f4f02: Fixes for deleting users as an admin, and internal auth events summary route token handling

@seamless-auth/express@0.6.0

Patch Changes

• e52ff77: Don't crash on non-JSON upstream responses. authFetch now parses response bodies
  defensively, so a plain-text error (e.g. a rate-limited 429 Too many requests) or an
  empty body (204) no longer throws in handlers that read the body before checking the
  status — which previously surfaced as an unhandled rejection that took down the adapter
  process. Non-JSON bodies are returned as { message: <text> }; empty bodies as
  undefined. Fixes Adapter process crashes on non-JSON upstream response (unguarded up.json() in all core handlers) #41.
• 3cf132e: Issue a session on OTP-based registration. Registration now starts with just an
  email, and verifying the registration email OTP completes sign-up and returns a
  session. The adapter previously proxied /otp/verify-email-otp and
  /otp/verify-phone-otp without setting cookies, so browser users finished
  registration unauthenticated. A new verifyRegistrationOtpHandler (core) plus a
  verifyRegistrationOtp express handler now set the session cookies on these
  routes (tolerating a phone-first step that returns no session yet), mirroring the
  login OTP verify handlers.
• 39f7aad: fix: updates core implementation to supply the authorization value during polling for magic links
• 46f4f02: Fixes for deleting users as an admin, and internal auth events summary route token handling
• Updated dependencies [e52ff77]
• Updated dependencies [3cf132e]
• Updated dependencies [39f7aad]
• Updated dependencies [46f4f02]
  • @seamless-auth/core@0.6.0