v9.18.1

Fixed

• Set sameSite to 'none' for cookies when using HTTPS #1229 (stevehobbsdev)

v9.18.0

Added

• Make state expiration configurable #1217 (aedelbro)

v9.17.0

Added

• Add xRequestLanguage, which sends X-Request-Language header to /passwordless/start #1210 (stevehobbsdev)

Fixed

• Check window object only if it is options.hash is not set #1209 (FDiskas)

v9.16.4

Fixed

• Fix: Passwordless Verify now sends client_id when specified #1202 (seanaye)

v9.16.3

Security

• Dependency updates #1200 (stevehobbsdev)

Fixed

• Add check around accessing event.data in web-message-handler #1195 (stevehobbsdev)

v9.16.2

Security

• Update idtoken-verifier to 2.1.2 #1182 (stevehobbsdev)

v9.16.1

Security

• Bump idtoken-verifier and run npm audit fix #1179 (frederikprijck)

v9.16.0

Added

• Add Recaptcha Enterprise support #1169 (akmjenkins)

Fixed

• Document optional params to WebAuth.signup #1168 (zog)

Security

• [Security] Bump y18n from 4.0.0 to 4.0.1 #1162 (dependabot-preview[bot])

v9.15.0

Full Changelog

Added

• [SDK-2391] Organizations support #1159 (stevehobbsdev)
• [SDK-2273] Add onRedirecting login hook #1157 (stevehobbsdev)

Changed

• Apply secure flag to cookies when running on https protocol #1158 (stevehobbsdev)

v9.14.3

Changed

• Add otp to tokenParams #1153 (psamim)