8.0.0
8.0.0 (July 28, 2023)
-
Security: Renamed the cookie and set secure attribute for cookie transmission when https is present
-
Security: Migrated off known deprecated, vulnerable or unmaintained dependencies
-
Security: Added express rate limiter
-
Added additional sanitization and validation for external inputs. Lusca provides input protection. The additional sanitization and validation are to add another layer of protection.
-
Added patch-package for temporary patching dependencies
-
Temporary patch for passportjs to handle logout failures
-
Temporary patch for passport-oauth2: better auth failure reporting
-
Removed broken Instagram oauth support as Meta no longer supports it
-
Added handler for 404(page not found) to avoid 500 errors when a route is not found
-
Fixed unhandled error during logout
-
Fixed pug tags with multiple attributes (thanks to @soundz77)
-
Added Lint-stage and Husky to lint all commits