sdk/v2.27.0

twentyhq/twentysdk/v2.27.0Aug 4, 2026by twenty-pr[bot]

AI Summary

Adds an onDisconnect lifecycle hook to connection providers, enhances security with captcha and throttling for password resets, and migrates web authentication from localStorage to httpOnly cookie sessions.

Key Highlights

  • Add onDisconnect lifecycle hook to connection providers
  • Add captcha and throttling to the password reset link
  • Migrate web auth from localStorage token pairs to httpOnly cookie sessions
  • Record and enforce per-user OAuth application authorizations

New Features

  • onDisconnect lifecycle hook for connection providers
  • Per-user OAuth application authorization enforcement
  • Slack channel welcome message functionality

Full Release Notes

<!-- generated-release-notes v1 -->

## ✨ New features

- feat(connections): add an onDisconnect lifecycle hook to connection providers ([#23538](https://github.com/twentyhq/twenty/pull/23538)) by @abdulrahmancodes

## 💅 Improvements & UX

- Add captcha and throttling to the password reset link ([#23372](https://github.com/twentyhq/twenty/pull/23372)) by @bosiraphael
- Make page layout tab layoutMode diffable and default standalone pages to vertical list ([#23596](https://github.com/twentyhq/twenty/pull/23596)) by @bosiraphael
- Unwrap settings front components in the front component build ([#23631](https://github.com/twentyhq/twenty/pull/23631)) by @ehconitin
- Migrate web auth from localStorage token pairs to httpOnly cookie sessions ([#23642](https://github.com/twentyhq/twenty/pull/23642)) by @FelixMalfait
- Remove outdated index view pitfall from app agent docs ([#23667](https://github.com/twentyhq/twenty/pull/23667)) by @prastoin
- Record and enforce per-user OAuth application authorizations ([#23678](https://github.com/twentyhq/twenty/pull/23678)) by @FelixMalfait

<details>
<summary>Full changelog (9 PRs)</summary>

- Add captcha and throttling to the password reset link ([#23372](https://github.com/twentyhq/twenty/pull/23372)) by @bosiraphael
- feat(connections): add an onDisconnect lifecycle hook to connection providers ([#23538](https://github.com/twentyhq/twenty/pull/23538)) by @abdulrahmancodes
- Make page layout tab layoutMode diffable and default standalone pages to vertical list ([#23596](https://github.com/twentyhq/twenty/pull/23596)) by @bosiraphael
- chore: bump version to 2.27.0 ([#23604](https://github.com/twentyhq/twenty/pull/23604)) by @twenty-pr
- Move open-record-in to object metadata and member preference ([#23614](https://github.com/twentyhq/twenty/pull/23614)) by @FelixMalfait
- Unwrap settings front components in the front component build ([#23631](https://github.com/twentyhq/twenty/pull/23631)) by @ehconitin
- Migrate web auth from localStorage token pairs to httpOnly cookie sessions ([#23642](https://github.com/twentyhq/twenty/pull/23642)) by @FelixMalfait
- Remove outdated index view pitfall from app agent docs ([#23667](https://github.com/twentyhq/twenty/pull/23667)) by @prastoin
- Record and enforce per-user OAuth application authorizations ([#23678](https://github.com/twentyhq/twenty/pull/23678)) by @FelixMalfait

</details>

**Full Changelog**: https://github.com/twentyhq/twenty/compare/sdk/v2.26.0...sdk/v2.27.0