Changelog

View Source

0.11.0 - 2026-10-11

  • Sign and verify the OAuth state cookie, rejecting unsigned or tampered cookies before the provider callback. Protected strategies now require a stable host-provided conn.secret_key_base (a strong binary secret) across both phases and all application instances. Restart in-flight OAuth flows after upgrading. #217
  • Require Plug 1.10 or later for signed-cookie support. #217
  • Exclude the provider param from callback_url params #216
  • Fix @spec for Ueberauth.Strategy.Helpers.options/1 to include nil #199

0.10.8 - 2024-02-27

  • Use conn.port by default in callback_url/1 #187

0.10.7 - 2024-01-04

  • Revert the change from 0.10.6 #195

0.10.6 - 2023-12-01

0.10.5 - 2023-03-09

  • Fix default port selection when none is specified on the host header #181

0.10.4 - 2023-01-19

  • Fix port being duplicate when behind reverse proxy and non-standard port #103

0.10.3 - 2022-09-13

0.10.2 - 2022-08-11

0.10.1 - 2022-07-05

  • Fix callback URL not mounted right when router has nested paths #166

0.10.0 - 2022-06-16

  • Add state_param_cookie_same_site to strategy options to support different SameSite values #148

v0.9.0 - 2022-04-27

  • Prefer x-forwarded-host to construct callback_url #161

v0.8.0 - 2021-08-19

  • Add support for custom URL schemes #144

v0.7.0 - 2020-04-17

  • Add support for CSRF #136
  • Improve documentation #137

v0.6.3 - 2020-03-05

  • Dynamic providers
  • Birthday part of info struct

v0.6.2 - 2019-09-11

  • Fixed Ueberauth request not respecting Script Name #97

v0.6.1 - 2019-03-14

  • Fix versioning for plug dependency

v0.4.0 - 2016-09-21

  • Target Elixir 1.3 and above
  • Fix Elixir 1.4 warnings
  • Fix bug preventing multiple providers

v0.3.0 - 2016-07-19

  • Allow :redirect_url to be configured
  • Handle requests with or without trailing slash

v0.2.1 - 2015-12-23

  • Add the ability to select which providers to use on a per-plug basis

v0.2.0 - 2015-11-28

  • Remove the Ueberauth.plug function in favour of making Ueberauth a plug

v0.1.0 - 2015-11-15

  • Initial release