11.1.0

• German (de) by @LordSimal
• Fixed labels not using the right translation domain

11.0.0

Added support to CakePHP 4.3

• Switched tests to new cakephp schema
• Update to PHPUnit 9.5

9.3.0

Added support to webauthn as Two-Factor Authentication

• Integration using webauthn-framework https://github.com/web-auth/webauthn-framework
• New config keys

'Webauthn2fa' => [
        'enabled' => false,
        'appName' => null,//App must set a valid name here
        'id' => null,//default value is the current domain
        'checker' => \CakeDC\Auth\Authentication\DefaultWebauthn2fAuthenticationChecker::class,
    ],

NOTE: Webauthn also works with U2F yubico key devices.

9.2.1

• Fixed the Entity is new on Change Password

9.2.0

• Switch to github actions
• New event AfterEmailTokenValidation
• Remove deprecations

9.0.4

• Fixed deprecations and stan issues
• Improved docs
• Fixed issue where RememberMe cookie
• Fixed deprecated UserHelper::isAuthorized

9.0.3

• Ukrainian (uk) by @yarkm13
• Docs improvements
• Fix DebugKit permissions issues

9.0.2

This release provides improvements for authorization behavior:

• Added a custom Unauthorized Handler
  • If logged user access unauthorized url he is redirected to referer url or '/' if no referer url
  • If not logged user access unauthorized url he is redirected to configured url (default to login)
  • on login we only use the redirect url from querystring 'redirect' if user can access the target url
  • App can configure a callable for 'url' option to define a custom logic to retrieve the url for unauthorized redirect
• Added postLink method to AuthLinkHelper
• UserHelper::welcome now works with request's attribute 'identity'

9.0.1

The 9.0 version uses the new plugins cakephp/authentication(read more) and cakephp/authorization(read more) instead of CakePHP
Authentication component. This version is compatible with CakePHP 4.x and the plugin
code was updated to remove all deprecations.

Improvements and Changes

• Migration to CakePHP 4
• Improved routes
• Improved integration tests
• Compatible with cakephp/authentication
• Compatible with cakephp/authorization
• Added/removed/changed some configurations to work with new authentication/authorization plugins, please check Migration guide for more info.
• Events constants were moved/removed from AuthComponent to Plugin class and their values was also updated, please check Migration guide for more info.
• Migrated usage of AuthComponent to Authorization/Authentication plugins.

8.5.1

• Added new event UsersAuthComponent::EVENT_SOCIAL_LOGIN_EXISTING_ACCOUNT