Version Packages

packages/core/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @seamless-auth/core
 
+## 0.6.0
+
+### Minor Changes
+
+- 3cf132e: Issue a session on OTP-based registration. Registration now starts with just an
+  email, and verifying the registration email OTP completes sign-up and returns a
+  session. The adapter previously proxied `/otp/verify-email-otp` and
+  `/otp/verify-phone-otp` without setting cookies, so browser users finished
+  registration unauthenticated. A new `verifyRegistrationOtpHandler` (core) plus a
+  `verifyRegistrationOtp` express handler now set the session cookies on these
+  routes (tolerating a phone-first step that returns no session yet), mirroring the
+  login OTP verify handlers.
+
+### Patch Changes
+
+- e52ff77: Don't crash on non-JSON upstream responses. `authFetch` now parses response bodies
+  defensively, so a plain-text error (e.g. a rate-limited `429 Too many requests`) or an
+  empty body (`204`) no longer throws in handlers that read the body before checking the
+  status — which previously surfaced as an unhandled rejection that took down the adapter
+  process. Non-JSON bodies are returned as `{ message: <text> }`; empty bodies as
+  `undefined`. Fixes #41.
+- 39f7aad: fix: updates core implementation to supply the authorization value during polling for magic links
+- 46f4f02: Fixes for deleting users as an admin, and internal auth events summary route token handling
+
 ## 0.5.4
 
 ### Patch Changes

packages/core/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@seamless-auth/core",
-    "version": "0.5.4",
+    "version": "0.6.0",
     "description": "Framework-agnostic core authentication logic for SeamlessAuth",
     "license": "AGPL-3.0-only",
     "author": "Fells Code, LLC",

packages/express/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @seamless-auth/express
 
+## 0.6.0
+
+### Patch Changes
+
+- e52ff77: Don't crash on non-JSON upstream responses. `authFetch` now parses response bodies
+  defensively, so a plain-text error (e.g. a rate-limited `429 Too many requests`) or an
+  empty body (`204`) no longer throws in handlers that read the body before checking the
+  status — which previously surfaced as an unhandled rejection that took down the adapter
+  process. Non-JSON bodies are returned as `{ message: <text> }`; empty bodies as
+  `undefined`. Fixes #41.
+- 3cf132e: Issue a session on OTP-based registration. Registration now starts with just an
+  email, and verifying the registration email OTP completes sign-up and returns a
+  session. The adapter previously proxied `/otp/verify-email-otp` and
+  `/otp/verify-phone-otp` without setting cookies, so browser users finished
+  registration unauthenticated. A new `verifyRegistrationOtpHandler` (core) plus a
+  `verifyRegistrationOtp` express handler now set the session cookies on these
+  routes (tolerating a phone-first step that returns no session yet), mirroring the
+  login OTP verify handlers.
+- 39f7aad: fix: updates core implementation to supply the authorization value during polling for magic links
+- 46f4f02: Fixes for deleting users as an admin, and internal auth events summary route token handling
+- Updated dependencies [e52ff77]
+- Updated dependencies [3cf132e]
+- Updated dependencies [39f7aad]
+- Updated dependencies [46f4f02]
+  - @seamless-auth/core@0.6.0
+
 ## 0.5.4
 
 ### Patch Changes

packages/express/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/express",
-  "version": "0.5.4",
+  "version": "0.6.0",
   "description": "Express adapter for Seamless Auth passwordless authentication",
   "license": "AGPL-3.0-only",
   "type": "module",