backend/v1.1.0

teamhanko/hankobackend/v1.1.0Oct 17, 2024by FlxMgdnz

AI Summary

This release introduces server-side sessions as an alternative to JWTs, including remote session revocation and a new `/sessions` endpoint for verification. It also includes various improvements and bug fixes to the admin API and configuration handling.

Key Highlights

Server-side sessions configuration with `enabled` and `limit` options
Sessions stored in the database with the session ID included in the JWT
New `/sessions` endpoint to verify JWTs instead of manual JWKS verification
Remote session revocation capability
Sessions list now visible in the `<hanko-profile>` element

New Features

Chinese email template corrected
WebAuthn transports returned in users endpoints
Admin API: get users by multiple IDs
Password update transaction handling fixed
Schema and markdown generation workflow fixes
Autogenerate config JSON schema

Full Release Notes

![release1 1_small](https://github.com/user-attachments/assets/f9fce717-1e8e-46a3-b13d-6e29356221b5)

This release introduces server-side sessions as an alternative to the previous approach of just issuing JWTs, and a bunch of smaller improvements and bug fixes.
- New config options 
```yaml
session:
  server_side:
    enabled: true
    limit: 5
```
- Sessions are stored in the DB, the JWT contains the session ID
- New `/sessions` endpoint to verify the JWT (instead of retrieving the JWKS and verifying the JWT yourself)
- Remote session revocation
- Sessions list in `<hanko-profile>`

## What's Changed
* fix: chinese email template corrected by @bjoern-m in https://github.com/teamhanko/hanko/pull/1627
* fix(admin-api): return webauthn transports in users endpoints by @lfleischmann in https://github.com/teamhanko/hanko/pull/1652
* feat(admin-api): get users by multiple ids by @lfleischmann in https://github.com/teamhanko/hanko/pull/1653
* chore(webhooks): update webhook.go by @eltociear in https://github.com/teamhanko/hanko/pull/1666
* fix: password update, password service transaction handling by @lfleischmann in https://github.com/teamhanko/hanko/pull/1669
* ci: fix schema and markdown generation workflows by @lfleischmann in https://github.com/teamhanko/hanko/pull/1603
* Server side sessions by @FreddyDevelop in https://github.com/teamhanko/hanko/pull/1673
* chore: update versions to 1.1.0 by @FreddyDevelop in https://github.com/teamhanko/hanko/pull/1748
* chore: autogenerate config JSON schema by @FreddyDevelop in https://github.com/teamhanko/hanko/pull/1754

**Full Changelog**: https://github.com/teamhanko/hanko/compare/backend/v1.0.3...backend/v1.1.0