• Release Candidate 5 for v1.0.0

    phil released this 2025-11-22 20:53:11 +01:00 | 3 commits to main since this release

    CRITICAL SECURITY FIX:

    • Require domain verification before authorization
    • DNS TXT record + email verification enforced
    • Unverified domains cannot see consent page

    Other fixes:

    • response_type=id support per IndieAuth spec
    • Test isolation improvements

    452 tests passing

    Downloads