Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 0 additions & 7 deletions .changeset/bearer-redirects.md

This file was deleted.

5 changes: 0 additions & 5 deletions .changeset/same-origin-authorized-fetch.md

This file was deleted.

8 changes: 8 additions & 0 deletions packages/angular/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
# @seamless-auth/angular

## 0.3.1

### Patch Changes

- Updated dependencies [782583c]
- Updated dependencies [e3cf1f9]
- @seamless-auth/client@0.7.0

## 0.3.0

### Minor Changes
Expand Down
4 changes: 2 additions & 2 deletions packages/angular/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@seamless-auth/angular",
"version": "0.3.0",
"version": "0.3.1",
"description": "Angular bindings for Seamless Auth: a signal-based auth service, route guards, and optional sign-in screens.",
"type": "module",
"engines": {
Expand Down Expand Up @@ -43,7 +43,7 @@
"rxjs": "^7.4.0"
},
"dependencies": {
"@seamless-auth/client": "^0.6.0",
"@seamless-auth/client": "^0.7.0",
"tslib": "^2.7.0"
},
"sideEffects": [
Expand Down
10 changes: 10 additions & 0 deletions packages/client/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,15 @@
# @seamless-auth/client

## 0.7.0

### Minor Changes

- 782583c: In bearer transport, a request that carries a token no longer follows a redirect to an origin outside `apiHost` and `trustedOrigins`. The client asks `fetch` for `redirect: 'manual'`, follows a redirect to a trusted origin itself (up to five hops, turning a `303`, or a `301` or `302` after a POST, into a GET as `fetch` does), and rejects any other with the new `UntrustedRedirectError` without sending the token on. Where the platform follows redirects regardless, as React Native's `fetch` does, a response that ended on another origin is rejected instead. A caller that sets `redirect` itself keeps that choice, and the final-origin check still applies. Requests without a token, and cookie transport, are unchanged.

### Patch Changes

- e3cf1f9: `authorizedFetch` works again for an app that serves `/auth` on its own origin (`apiHost: ""`, as `<AuthProvider apiHost="">`). Since 0.5.0 it refused every path in that setup with `UntrustedOriginError`, because a path stayed relative and the origin check could not read an origin from it. A path now resolves on the page's own origin, which is trusted. Without a page (server rendering, React Native) an empty `apiHost` still sends nothing.

## 0.6.0

### Minor Changes
Expand Down
2 changes: 1 addition & 1 deletion packages/client/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@seamless-auth/client",
"version": "0.6.0",
"version": "0.7.0",
"description": "Framework-agnostic client core for Seamless Auth: the HTTP client, session store, and result types the framework bindings share.",
"type": "module",
"exports": {
Expand Down
9 changes: 9 additions & 0 deletions packages/react-native/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,14 @@
# @seamless-auth/react-native

## 0.3.2

### Patch Changes

- 782583c: In bearer transport, a request that carries a token no longer follows a redirect to an origin outside `apiHost` and `trustedOrigins`. The client asks `fetch` for `redirect: 'manual'`, follows a redirect to a trusted origin itself (up to five hops, turning a `303`, or a `301` or `302` after a POST, into a GET as `fetch` does), and rejects any other with the new `UntrustedRedirectError` without sending the token on. Where the platform follows redirects regardless, as React Native's `fetch` does, a response that ended on another origin is rejected instead. A caller that sets `redirect` itself keeps that choice, and the final-origin check still applies. Requests without a token, and cookie transport, are unchanged.
- Updated dependencies [782583c]
- Updated dependencies [e3cf1f9]
- @seamless-auth/client@0.7.0

## 0.3.1

### Patch Changes
Expand Down
4 changes: 2 additions & 2 deletions packages/react-native/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@seamless-auth/react-native",
"version": "0.3.1",
"version": "0.3.2",
"description": "Headless React Native binding for Seamless Auth: provider, hooks, and the native ports for passkeys, secure token storage, and in-app browser OAuth.",
"type": "module",
"exports": {
Expand Down Expand Up @@ -45,7 +45,7 @@
"react": "^18.0.0 || ^19.0.0"
},
"dependencies": {
"@seamless-auth/client": "^0.6.0",
"@seamless-auth/client": "^0.7.0",
"@seamless-auth/types": "^0.28.0"
},
"sideEffects": false
Expand Down
9 changes: 9 additions & 0 deletions packages/react/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,14 @@
# @seamless-auth/react

## 0.17.1

### Patch Changes

- 782583c: In bearer transport, a request that carries a token no longer follows a redirect to an origin outside `apiHost` and `trustedOrigins`. The client asks `fetch` for `redirect: 'manual'`, follows a redirect to a trusted origin itself (up to five hops, turning a `303`, or a `301` or `302` after a POST, into a GET as `fetch` does), and rejects any other with the new `UntrustedRedirectError` without sending the token on. Where the platform follows redirects regardless, as React Native's `fetch` does, a response that ended on another origin is rejected instead. A caller that sets `redirect` itself keeps that choice, and the final-origin check still applies. Requests without a token, and cookie transport, are unchanged.
- Updated dependencies [782583c]
- Updated dependencies [e3cf1f9]
- @seamless-auth/client@0.7.0

## 0.17.0

### Minor Changes
Expand Down
4 changes: 2 additions & 2 deletions packages/react/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@seamless-auth/react",
"version": "0.17.0",
"version": "0.17.1",
"description": "A drop-in authentication solution for modern React applications.",
"type": "module",
"exports": {
Expand Down Expand Up @@ -56,7 +56,7 @@
}
},
"dependencies": {
"@seamless-auth/client": "^0.6.0",
"@seamless-auth/client": "^0.7.0",
"@seamless-auth/types": "^0.28.0",
"@simplewebauthn/browser": "^13.1.0",
"libphonenumber-js": "^1.12.7"
Expand Down
8 changes: 8 additions & 0 deletions packages/svelte/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
# @seamless-auth/svelte

## 0.2.1

### Patch Changes

- Updated dependencies [782583c]
- Updated dependencies [e3cf1f9]
- @seamless-auth/client@0.7.0

## 0.2.0

### Minor Changes
Expand Down
4 changes: 2 additions & 2 deletions packages/svelte/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@seamless-auth/svelte",
"version": "0.2.0",
"version": "0.2.1",
"description": "Svelte bindings for Seamless Auth: a rune-based session, SvelteKit guards, and optional sign-in screens.",
"type": "module",
"svelte": "./dist/index.js",
Expand Down Expand Up @@ -70,7 +70,7 @@
}
},
"dependencies": {
"@seamless-auth/client": "^0.6.0"
"@seamless-auth/client": "^0.7.0"
},
"sideEffects": [
"*.css"
Expand Down
8 changes: 8 additions & 0 deletions packages/vue/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
# @seamless-auth/vue

## 0.2.1

### Patch Changes

- Updated dependencies [782583c]
- Updated dependencies [e3cf1f9]
- @seamless-auth/client@0.7.0

## 0.2.0

### Minor Changes
Expand Down
4 changes: 2 additions & 2 deletions packages/vue/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@seamless-auth/vue",
"version": "0.2.0",
"version": "0.2.1",
"description": "Vue bindings for Seamless Auth: a plugin and composable for session state, route guards, and optional sign-in screens.",
"type": "module",
"exports": {
Expand Down Expand Up @@ -63,7 +63,7 @@
}
},
"dependencies": {
"@seamless-auth/client": "^0.6.0"
"@seamless-auth/client": "^0.7.0"
},
"sideEffects": [
"*.css"
Expand Down
Loading