v0.24.0

The 0.22.0 allows to use couch-auth with CouchDB 3.4 but did not provide a smooth transition. This is now fixed. See COUCH_MIGRATION.md for details

v0.22.0

CAUTION: SEMI-BREAKING CHANGES!

This release will make couch-auth compatible with the stronger hashing of couchdb starting from version 3.4. It is by itself backwards compatible, but couchdb's behaviour might still break it!

• ✨ separate hashing configuration of _users and sl-users passwords (there is a new sessionHashing object right besides iterations)
• ✨ session validation takes all parameters of the _users doc into account when verifying the session (iterations and pbkdf2_prf)
• ✨ new _users session will default to 'sha256' with 1000 iterations and 32 byte keys. To prevent couchdb from upgrading them to stronger hashes, configure upgrade_hash_on_auth to false or iterations to the same value. Verifying hashes with 600.000 takes quite some time as couch-auth is not employing hash-caching as couchdb does. As the _users provide only temporary access and use random passwords, the time to verify the hashes is not really worth it.

v0.21.2

• Add token to forgot-password emitter (#93) c40c1f5

v0.21.1...v0.21.2

v0.21.1

• Fix config type sendExistingUserEmail (#91) f8ac9e0
• Add emitting token on forget-password (#92) cc884a7

v0.21.0...v0.21.1

v0.21.0

• ⬆️ Bump follow-redirects from 1.15.2 to 1.15.6 (#90) 48142a8
• ⬆️ Bump express from 4.18.2 to 4.19.2 (#89) 8c1d788
• ⬆️ Bump braces from 3.0.2 to 3.0.3 (#88) e6bef29
• ⬆️ Bump axios from 1.2.3 to 1.7.2 (#87) f530b88
• ⬆️ Bump nodemailer from 6.9.0 to 6.9.9 (#86) ead00d2
• ⬆️ Bump word-wrap from 1.2.3 to 1.2.4 (#76) 4aed895
• Handle errors during sending confirm email fbb800f
• Merge pull request #85 from perfood/add-more-fine-grained-email-sending-and-event-emitters 969f5a3
• Add 'useCustomMailer' and 'sendExistingUserEmail' config options 3251483
• Add 'useCustomMailer' and 'sendExistingUserEmail' config options a82f8b4

v0.20.1...v0.21.0

v0.20.1

• Add rate limiting for /password-reset endpoint (#80) d780f47
• 🐛 Resolve sporadic session creation errors (#79) cc9bd94

v0.20.0...v0.20.1

v0.20.1-1

• fix failing test by providing email 44b61fa
• check whether token matches, activate config in test a75212b

v0.20.1-0...v0.20.1-1

v0.20.1-0

• Add rate limiting for /password-reset endpoint 68ea766
• 🐛 Resolve sporadic session creation errors (#79) cc9bd94

v0.20.0...v0.20.1-0

v0.19.2

• Merge pull request #72 from perfood/dependabot/npm_and_yarn/nunjucks-3.2.4 66b49f4
• Merge pull request #75 from perfood/dependabot/npm_and_yarn/tough-cookie-4.1.3 ea9031a
• ⬆️ Bump tough-cookie from 4.1.2 to 4.1.3 f64d4ce
• ⬆️ Bump nunjucks from 3.2.3 to 3.2.4 bd0fbdf
• 0.19.1: email and _users bugfixes 8be77d8
• 📝 document v0.19.1 a4fd181
• 🐛 (#67) lowercase + trim email/username on login e1713e6
• 🐛 (#69) Keep _users docs not managed by couchAuth 886f449

v0.19.0...v0.19.2