v1.16.0 - 2023-01-06
- Laravel v10 Support by @driesvints in laravel#435
v1.15.0 - 2023-01-03
- Update PrepareAuthenticatedSession.php by @francoism90 in laravel#434
- Uses PHP Native Type Declarations 🐘 by @nunomaduro in laravel#421
- Fix error while preparing PasswordResetResponse with views turned off by @leonkllr0 in laravel#433
v1.14.1 - 2022-12-09
- Only fire event when actually updating the database to disable two factor authentication by @taylorotwell in https://github.com/laravel/fortify/commit/04b4b9c20e421c415d0427904a72e08a21bdec27
v1.14.0 - 2022-11-23
- Add more Response contract bindings by @bdsumon4u in laravel#425
v1.13.7 - 2022-11-04
- Update parameter order for hash_equals function in TwoFactorLoginRequest by @jayan-blutui in laravel#422
- Use
booleanrather thanfilledfor remember by @Codeatron5000 in laravel#423
v1.13.6 - 2022-11-01
- Fix error message when entering invalid 2fa code by @emargareten in laravel#415
- Use Fortify username method on ConfirmPassword action by @jayan-blutui in laravel#420
v1.13.5 - 2022-10-21
- Add and use constants for session flashes by @dwightwatson in laravel#409
- Use current_password rule when changing password by @dwightwatson in laravel#410
- Parameters order with hash_equals by @chivincent in laravel#411
v1.13.4 - 2022-09-30
- Only save user if need to by @taylorotwell in https://github.com/laravel/fortify/commit/9a68cf2deb37d1796b6e2fd97d3c61f086868914
v1.13.3 - 2022-08-16
- Return recovery errors under the
recovery_codekey by @jessarcher in laravel#401
v1.13.2 - 2022-08-09
- Fix second usage of 2FA code by @xwillq in laravel#399
v1.13.1 - 2022-07-05
- Call FailedTwoFactorLoginResponse::toResponse with TwoFactorLoginRequest by @ricklambrechts in laravel#395
v1.13.0 - 2022-05-05
- Added config option for custom OTP window by @robtesch in laravel#385
v1.12.0 - 2022-03-29
- 2FA setup key by @ps-sean in laravel#371
- Enable 2FA confirmation by default by @taylorotwell in https://github.com/laravel/fortify/commit/a6caadc80e348755de0e1da221a6253d9f2c48f9
- Fix double error message for failed 2FA response by @driesvints in laravel#369
v1.11.2 - 2022-03-08
- Ensures route
password.confirmis defined when not using views by @Frozire in laravel#368
- Cache 2FA token timestamp by @driesvints in laravel#366
v1.11.1 - 2022-02-24
- Fix Exception when sending empty 2FA confirmation code by @srdante in laravel#361
- Unsupported operand types on rollback migration by @Jackpump in laravel#362
v1.11.0 - 2022-02-22
- Include the otpauth url when retrieving the QR svg by @JanMisker in laravel#356
- Confirmable 2FA by @taylorotwell in laravel#358
- Fix incorrect key for error bag by @vaibhavpandeyvpz in laravel#360
v1.10.2 - 2022-02-08
- Prevent new login after 2FA challenge (#353)
- Fix throttle bypass exploit (#354)
v1.10.1 - 2022-02-01
- Fix VerifyEmailResponse resolving (#349)
- Add VerifyEmailResponse contract (#347)
- Switch to anonymous migrations (#348)
- Customise the auth middleware name (#335)
- Check if authenticated user has 2FA enabled (#334)
- Fix an issue with array to string conversion (#333)
- Use boolean rather than filled for remember (#328)
- Add a check for two factor auth being enabled (#323)
- Allow verification rate limiter to be configurable (#313)
- Allow reset password redirect (#307)
- Fix auth guard (#296)
- Restrict guest Middleware to Fortify's guard (#258)
- Remove password confirmation requirement for reset password (#254)
- Require password and confirmation (#245)
- Redirect to intended URL after registration (#222)
- Move route outside
$enableViews(#203)
- Fix missing current password (#194)
- Revert "Retrieve user through provider" (#195)
- Retrieve user through provider (#189)
- Add the
prefixanddomainconfiguration options (#143) - Change how feature options are stored to work with config caching (b2430958)
- Fix 2FA disabled routes via
viewsconfig (#142)
- Redirect to intended URL after email verification (#119)
- Only use two factor action when enabled (#127)
- Add FailedTwoFactorLoginResponse contract (#106)
- Redirect to intended after two factor login (#105)
- Allow Fortify views to accept
Responsableobjects (#107) - Use the
Rule::uniquefor new user validation (#108)
- Add
attemptsmethod to rate limiter (#85) - Add name to Profile update and Password update routes (#89)
- Fix for empty password during confirmation (#87)
- Add option to force the password to have a special character (#65)
- Allow 'confirmPasswordView' to use view prefixes (#71)
- Send JSON response if request is an AJAX request (#75)
- Remove unnecessary bag (85a7dfb)
- Fix test bug when use sqlite database (#69)
- Allow the expected email address request variable to be changed (#28)
- Update configuration stub with middleware option (#55)
- Make routes more dynamic (#41)
- Add illuminate/support dependency (#46)
- Resend email verification after user update (#52, 951d943)
- Only register two-factor-challenge routes if TFA feature enabled (#44)
- Added missing request to the throwFailedAuthenticationException method (#61)
- Switch the TwoFactorLoginResponse for a contract bound in container (#34)
- Enable password confirmation (9e9d154)
- Extract
ConfirmPasswordaction (a9e68f2)
- Update what is passed to custom callback (9215e54)
- Pass request through to the callback (#21)
- Allow granular authentication customization (cd8b6aa)
- Allow full customization of authentication pipeline (6c36b08)
- Use PasswordValidationRules trait in CreateNewUser action (#18)
- Callable customization of any view (661d726)
Initial stable release.