Skip to main content
ConnectFor teamsSign inDashboard
Resources · Changelog

Versions transparent, changes visible.

We collect the major changes to the SDK and infrastructure here. For detailed change notes, see GitHub Releases or sdk/CHANGELOG.md.

8 entries total·GitHub Releases →·SDK CHANGELOG.md →
  1. SDK

    SDK v9.0.0

    • Two guards fail safer — empty requirement lists deny (createPermissionGuard), unknown roles reject at every tier (requireOrg)
    • Hono adapter persists rotated tokens after a silent refresh — fixes a session-death bug
    • Webhook + SSF receivers return fixed statuses (false / 400) on malformed input instead of a 500
    • Test suite grown 230 → 636 across 11 untested modules and 4 adapters
  2. SDK

    SDK v8.0.0

    • registerApp() / createClient() now require redirectUris (1–10 https/loopback) — enforced at compile time, not at runtime
    • No other changes — all 14 export paths and every signature unchanged; a pure type tightening
  3. SDK

    SDK v7.0.0

    • @modfolio/connect-sdk/agent — added MCP Agent delegation helpers
    • ConnectUser 4 new fields (agent / delegationChain / toolPermissions / chainId)
    • getAgentToken / delegateToAgent / isAgentToken / getDelegationChain / getAgentInfo
    • Fully compatible with existing v6 code (additive only)
  4. Hub

    Hub v1.1.0

    • Adopted athsra v3 secret store (universe-wide standard)
    • 22/22 clients reached production — Universe deploy complete
    • Applied D1 migration V44 (sms-ssf-backfill) — 70+ tables
  5. SDK

    SDK v6.0.0

    • Step-up authentication (onStepUpRequired hook, ACR 7 levels)
    • @modfolio/connect-sdk/hono — Hono (CF Workers) adapter
    • ConnectUser: passkeyBackupState / passkeyPrfCapable / passwordless / sessionTrustLevel
    • @modfolio/connect-sdk/dpop — DPoP proof utilities
    • @modfolio/connect-sdk/fedcm — FedCM browser helpers
  6. SDK

    SDK v5.0.0

    • Silent SSO via prompt=none (automatic middleware)
    • createSSFReceiver() for CAEP/SSF real-time security events (@modfolio/connect-sdk/ssf)
    • Default refreshTimeout of 3 seconds applied (resolving the previous unbounded blocking)
    • breaking: tokens.token removed → use tokens.access_token only
  7. SDK

    SDK v4.0.0

    • Tenant-aware ConnectUser (tenantId / tenantDomain)
    • isTenantUser / getTenantId / getTenantDomain / belongsToTenant / requireTenant
    • verifyToken() extracts tenant_id, tenant_domain claims
  8. SDK

    SDK v3.0.0

    • RFC 8176 AMR/ACR JWT claims (amr / acr / authTime)
    • hasAuthMethod / hasMfa / isMfaSession
    • Session auth context propagation