v0.3.20 v1.7.6
medium risk
tobychui/zoraxySep 24, 2026 → Sep 24, 20260 days between releases
What's New
Updates authentication libraries with new captcha, ban features, and bug fixes.
Breaking Changes
- Passwords over maxPasswordLength are now rejected with PASSWORD_TOO_LONG before hashing or verification.
New Features
- Added `bannedUserMessage` function for custom ban error details.
- Added Vercel BotID as a captcha provider.
- Added new `check` and `check schema` commands for adapter validation.
Improvements
- Updated authentication libraries.
Bug Fixes
- Fixed React hydration mismatches when session or plugin auth queries resolve before streamed components hydrate.
- Prevented older auth-query responses from overwriting newer results when requests overlap.
- Fixed model identity when a custom model name matches another schema key.
- Fixed social account linking through the OAuth Proxy plugin.
- Fixed schema validation for Cloudflare D1, Prisma, and SQLite adapters.
Upgrade Notes
Update your configuration to support the new `bannedUserMessage` function. Be aware that passwords exceeding the `maxPasswordLength` limit will now be rejected. Consider configuring Vercel BotID as a new captcha provider.
The Two Releases
v0.3.20
v0.3.20
Sep 24, 2026· 28 days ago
Minimal release notes: "**Full Changelog**: https://github.com/NandhaKishorM/laya/compare/v0.3.19...v0.3.20"
Full release notesv1.7.6
v1.7.6
Sep 24, 2026· 28 days ago
Updates authentication libraries focusing on bug fixes for hydration, schema validation, and social linking, plus new captcha and ban features.
Full release notes