1.0.66

What's Changed

• [deps]: Pin dependencies by @renovate in #368
• Lowering Admin Page rate limit by @jrmccannon in #371
• Ignore Datadog.Trace in Renovate updates by @Tyrrrz in #373
• [deps]: Lock file maintenance by @renovate in #336
• Fix pin reference for HTTP request action by @Tyrrrz in #365
• Move apex charts dependency by @jonashendrickx in #375
• [deps]: Update gh minor by @renovate in #352
• Using existing record to cancel invite by @jrmccannon in #374
• [deps]: Update npm minor by @renovate in #378
• Create workflow-linter.yml by @jonashendrickx in #379
• Attestation (Limit use of authenticators) by @jonashendrickx in #372
• BreadCrumb tests by @jonashendrickx in #380
• Send Magic Link by @jrmccannon in #346
• Create CODEOWNERS by @jonashendrickx in #383
• [deps]: Update System.Configuration.ConfigurationManager to v8 by @renovate in #385
• [deps]: Update Serilog.AspNetCore to v8.0.1 by @renovate in #369
• Fixed Attestation link size to match other "buttons" by @jrmccannon in #381
• UI prompt does not make sense when no plans are shown by @jonashendrickx in #389
• Get Passwordless client library from NPM. by @jonashendrickx in #391
• Rename route parameter 'app' to 'appId' by @jonashendrickx in #388
• Fix FIDO2 MDS3 caching failures on Azure. by @jonashendrickx in #393
• Add security headers by @jonashendrickx in #384
• Bugfix: Whitelist/Blacklist evaluation not happening correctly. by @jonashendrickx in #394
• Merge info alert boxes into one. by @jonashendrickx in #382
• Fix CSP errors related to caching & fix routing errors by @jonashendrickx in #395
• BEEEP: SecureScript & SecureStylesheet (Refactored with tests) by @jonashendrickx in #397
• Fix return url by @jonashendrickx in #398
• BEEEP: Move middleware to maintain readability. by @jonashendrickx in #396
• Active users count charts by @jonashendrickx in #390
• [deps]: Pin @passwordlessdev/passwordless-client to 1.1.2 by @renovate in #399
• [deps]: Update vue to v3.4.18 by @renovate in #400
• Typo in email You're email is already connected to an organization by @jonashendrickx in #404
• Update language from black whitelist to block allowlist by @jonashendrickx in #403
• Prepare to kill EfTenantStorageFactory by @jonashendrickx in #401
• Update renovate.json - Follow Bitwarden policy by @jonashendrickx in #407
• Charts for Users and Credentials y-axis should be whole numbers by @jonashendrickx in #402
• Sort allowed authenticators alphabetically by @jonashendrickx in #409
• AdminConsole health checks by @jonashendrickx in #405
• Configuring allowlist should expect attestation to be used. by @jonashendrickx in #408
• Remove IDbContextFactory by @jonashendrickx in #411
• Clean up 'Playground - Registration' by @jonashendrickx in #410
• Add quotas and rate limits to magic link emails by @Tyrrrz in #392
• Fix background service by @jonashendrickx in #413
• Throw on expiration by @abergs in #417
• Exclude health checks from event logging by @jonashendrickx in #418
• We don't need these HealthCheck endpoints anymore. by @jonashendrickx in #419
• Fix migration script for production by @jonashendrickx in #425
• [deps]: Update npm minor by @renovate in #427
• [deps]: Lock file maintenance by @renovate in #387
• [deps]: Update gh minor by @renovate in #377
• .NET 8.0.2 IDE0005 dotnet format issue by @jonashendrickx in #430
• AppId availability check is returning a 500 in admin console. by @jonashendrickx in #415
• PAS 371 - Change token template by @jrmccannon in #424
• API Key Management Confirmation Dialog & Horizontal Scrolling by @jonashendrickx in #412
• PAS 370 - Add TTL by @jrmccannon in #423
• Upgrade Passwordless.AspNetCore to 2.0.0-beta6 by @jrmccannon in #433
• Revert "Upgrade Passwordless.AspNetCore to 2.0.0-beta6" by @jonashendrickx in #434
• [deps]: Update codecov/codecov-action action to v4 by @renovate in #386
• Add ReportingBackgroundService again. by @jonashendrickx in #436
• Remove obsolete columns by @jonashendrickx in #435
• Show Magic Link Setting by @jrmccannon in #432
• Open documentation link in new tab by @jonashendrickx in #437
• HTML encode strings in e-mails by @jonashendrickx in #442
• Fix app deletion by @jonashendrickx in #441
• Replace deploy with a workflow dispatcher by @Tyrrrz in #414
• Remove nuget-minor by @jrmccannon in #431
• Fix variable substitution in deployment job by @Tyrrrz in #446
• PAS-378 | Create pull request template by @merissaacosta in #445
• Add 'Async' suffix to async methods by @pooya1380m in #444
• Switch from DateTimeOffest to DateTime in EF models by @Tyrrrz in #451
• Dynamic matrix cases for the deploy job by @Tyrrrz in #447
• No forbidden content validation by @jonashendrickx in #449
• [PAS289][Defect] Feedback no longer a confirmation step when deleting user credentials by @jonashendrickx in #439
• PAS-378 | PR Template: change template dir and add spaces by @merissaacosta in #452
• Get started, fixed link by @abergs in #453
• PAS-379 | Event logging wording allow list & block list by @jonashendrickx in #457
• PAS-318 | Horizontal scrolling for organization events by @jonashendrickx in #456
• Clean up DefaultMailService by @Tyrrrz in #461
• PAS-262 | Display icons for authenticators by @jonashendrickx in #462
• PAS-382 | Fix /account/useronboarding by @jonashendrickx in #466
• PAS-382 | Refactor import maps by @jonashendrickx in #467
• PAS-384 | Fix delete passkey bug once and for all by @jonashendrickx in #469
• Element references may not exist when not logged in. by @jonashendrickx in #468
• PAS-381 | Partition rate limits by tenant for the magic link endpoint by @Tyrrrz in #464
• Run EventDeletionBackgroundWorker at fixed time. by @jonashendrickx in #471
• PAS-262 | Icon for authenticators without icon in MDS by @jonashendrickx in #470
• Make onboarding cleanup faster by @jonashendrickx in #472
• Use ExecuteDeleteAsync to delete an organization. by @jonashendrickx in #473
• Application logs table refactoring by @jonashendrickx in #459
• PAS-330 | Charts: Filenames for export by @jonashendrickx in #460
• Implement value comparers for the array conversions by @jonashendrickx in #474
• Remove dead code by @jonashendrickx in #475
• Temporarily disable rate limiting in magic links endpoint by @Tyrrrz in #463
• Track Client-Version header by @jonashendrickx in #477
• Fix monthly quotas not applied directly on app creation by @Tyrrrz in #480
• Delete expired organization events at midnight UTC. by @jonashendrickx in #478
• Refactor validation for registering tokens, setting alias and magic links by @jonashendrickx in #479
• PAS-202 | OpenAPI by @jonashendrickx in #481
• Don't use caching in quota checks by @Tyrrrz in #483
• Update pull_request_template.md by @abergs in #476
• PAS-393 | AppId availability check is not displayed in the UI correctly by @jonashendrickx in #485
• Revert "Temporarily disable rate limiting in magic links endpoint (#463)" by @abergs in #484
• Use Magic Links in AdminConsole by @abergs in #421
• Upgrade vue from 3.4.19 to 3.4.20 by @jonashendrickx in #493
• fix-magic-link-redirect by @jrmccannon in #494
• PAS-202 | OpenAPI: Users by @jonashendrickx in #488
• PAS-202 | OpenAPI: Event logging by @jonashendrickx in #486
• [deps]: Update Postmark to v4.7.12 by @renovate in #491
• CVE-2024-0057 by @jonashendrickx in #498
• CVE-2024-0056 by @jonashendrickx in #499
• CVE-2022-26907 by @jonashendrickx in #500
• PAS-202 | Prevent Swagger from crashing with duplicate authorization policies. by @jonashendrickx in #495
• PAS-202 | OpenAPI: Magic links by @jonashendrickx in #487
• PAS-375 | Self-hosting magic links bootstrap fix by @jonashendrickx in #492
• Initialize AC Quota by @jrmccannon in #503
• Allow AC to send magic links by @jrmccannon in #507

New Contributors

• @merissaacosta made their first contribution in #445
• @pooya1380m made their first contribution in #444

Full Changelog: 1.0.59...1.0.66