Highlights MFA trusted devices: After completing MFA, users can trust their browser and skip repeated MFA prompts on it. Admins set the policy for the whole tenant, restrict it per organization, and manage devices from Console, Account Center, and the APIs. Keep your user IDs when migrating: User IDs can now be up to 128 characters, and self-hosted Logto accepts a custom id when creating a user, s…
@logto/connector-kit@5.1.2
@logto/phrases@1.32.0
@logto/console@1.41.0
@logto/experience@1.23.0
@logto/connector-dingtalk-web@0.4.7
@logto/connector-twilio-sms@1.5.0
@logto/account@0.7.0
@logto/connector-apple@1.6.10
@logto/core@1.44.0
Sign-in Experience now supports es-MX (Spanish, Mexico). For users whose language is Spanish (Mexico), phone inputs default to the Mexico country code (+52). This release also fixes list formatter placeholders and the remaining untranslated MFA message in the Spanish locales. Security hardening SSRF protection for webhooks and enterprise SSO Outbound requests configured through the Management API…
@logto/translate@0.2.17
@logto/tunnel@0.3.11
@logto/core-kit@2.13.0
@logto/language-kit@1.4.0
@logto/shared@3.4.3
@logto/experience@1.22.0
@logto/phrases@1.31.0
@logto/phrases-experience@1.15.0
@logto/core@1.43.0
Highlights Custom domain verification files: Serve small text or JSON verification files from your active custom domain, so third-party services that verify domain ownership by file no longer need a separate host. Email access rules: A new email allowlist plus wildcard address and domain patterns give tenants precise control over which emails can sign up or be linked. Reset password magic links: T…
@logto/core-kit@2.12.0
@logto/translate@0.2.16
@logto/tunnel@0.3.10
@logto/phrases@1.30.0
@logto/phrases-experience@1.14.1
@logto/shared@3.4.2
@logto/console@1.39.0
@logto/experience@1.21.0
@logto/core@1.42.0