Skip to main content

Changelog

This page summarizes release history for the Kyqu auth platform.

[0.1.1] - 2026-06-23

Highlights

  • Fixed broken password-change API and SDK method
  • Safer magic-link browser flow (session_code + exchange endpoint)
  • Stricter project auth enforcement (suspended/disabled projects)
  • Production-hardening defaults and SSRF protection for webhooks

Breaking changes

AreaChange
Magic-link GET redirectlogin_url?token=…login_url?session_code=… — call POST …/session/exchange or exchangeSessionCode()
SDK changePasswordNow changePassword(token, input)

New configuration

VariablePurpose
API_BASE_URLCanonical public URL of the Kyqu API (for email action links)

See Configuration Reference and Production Hardening for setup details.

[0.1.0] - 2026-05-31

Initial public release.