Skip to main content

AuthProxy PWA Changelog

Текущая версия

v1.6.8 (Июль 2026)

[1.6.8] - 2026-07-24​

Migration Level: 🟢 PATCH​

Changed​

  • Session expiry logout: «session expired» modal is non-blocking — redirect to login no longer waits for dismiss.
  • SSE / session docs: sustained 401 on protected routes and SPA navigation guards documented.

Fixed​

  • Settings 401 after boot: /login/profile, /login/history, and other protected routes logout on sustained API 401 (not only initial boot probe), including SPA navigation between settings pages.
  • Session probe storm: parallel 401s no longer spawn dozens of sessions?current=true re-probes; duplicate checks blocked while logout is in flight.
  • Profile without session: removed PROFILE_PREVIEW fallbacks (ID, inbound email); on 401 profile stays on skeleton until redirect.

[1.6.7] - 2026-07-24​

Migration Level: 🟢 PATCH​

Changed​

  • SSE / session docs: protected-route boot guard — single session probe on settings shell vs double probe after SSE disconnect.

Fixed​

  • Settings with dead session: opening a protected settings route with expired/missing session triggers logout and redirect at boot (one sessions?current=true probe).
  • Form12 mobile FIDO2: «Add device key» link restored — same register path as Form2 → /login/device-key.
  • Push notifications: friendly i18n when backend returns 1116 (WebPushDisabled) on GET /auth/v1/notifications/public_key.

[1.6.6] - 2026-07-21​

Migration Level: 🟢 PATCH​

Added​

  • Login lazy routes: route-level skeleton while login forms load (Form10 picker / inline panels).

Changed​

  • Boot perf: Inter font loads lazily; login shell stays visible during initial chunk fetch.
  • Auth API origin: session probe and API calls align with login requests on deployed stands.
  • Service Worker: registration only in standalone PWA; browser tabs skip SW at boot.
  • SSE / push: EventStream and push subscription start only when an active session is confirmed.

Fixed​

  • Mobile browser login (normal mode): session confirmed via API probe instead of document.cookie (HttpOnly sid); post-login reload, stale returnUrl, and bfcache/timing hardening.
  • Manifest CSP: removed runtime blob manifest override blocked by manifest-src 'self'.
  • Pass Key password (mobile): touch keyboards and autofill use native type="password" / input sync.

[1.6.5] - 2026-07-20​

Migration Level: 🟢 PATCH​

Changed​

  • Login / Form16 copy and controls use brand text tokens; success modal and cookie Accept use --brand-success.
  • Desktop project wordmark uses --brand-text-primary; Form10 card nudged higher on large viewports.

[1.6.4] - 2026-07-18​

Migration Level: 🟢 PATCH​

Changed​

  • ProjectBrand naming; applications and settings UI use --brand-text-primary / secondary tokens.
  • Mute all / Test notification controls restyled; desktop settings scrollbar polish.

Fixed​

  • OTP six-digit caret behavior; hide «End all» when no other sessions; social link confirm after local login.

[1.6.3] - 2026-07-17​

Migration Level: 🟢 PATCH​

Added​

  • Pending-approval UX for backend error 1122; Telegram bot handle in 2FA settings row.

Changed​

  • Customer auth CSS from public/css with refreshed cache-bust; Form10 desktop states aligned to --brand-* tokens.

Fixed​

  • OTP resend timer from real challenge deadline; Form10 desktop layout polish; Form16 success exit via hard navigation.

[1.6.2] - 2026-07-11​

Migration Level: 🟢 PATCH​

Added​

  • Desktop registration (/login/register, lg+): Bank API two-card shell with OTP step.
  • Form10 desktop inline panels for Phone, Email, User Key, and FIDO2 device-key.
  • OtpCodeField redesign: single 6-digit segmented control with inline error state.

Changed​

  • 2FA settings: link actions replaced with interactive radio toggles.
  • Form10 desktop OTP navigation aligned with Bank API mockup.

Fixed​

  • Profile link-only identifier flow restored; FIDO2 desktop Form10 token usage; inline OTP errors on phone/email login.

[1.6.1] - 2026-07-10​

Migration Level: 🟢 PATCH​

Added​

  • Desktop Form10 (lg+): Bank API card layout with inline login panels (form11–form15).
  • Inline forgot Pass Key recovery inside Form10 desktop shell.
  • Sign history split (login vs cryptographic sign log); per-stand branding via get_info.
  • Lazy routes for settings, login forms, and elliptic crypto chunk.

Changed​

  • Desktop Pass Key chrome, forgot-flow inline errors, and OAuth redirect hardening for iOS Safari.
  • Settings icons consolidated under IconApp sprite.

Fixed​

  • Forgot email code validation in Form10; sessions «End all» no longer kills current session; dark-theme auth buttons visibility.

[1.6.0] - 2026-06-24​

Migration Level: 🟡 MINOR​

Added​

  • Project-wide design system at @shared/ui/design-system (Button, Field, OtpCodeField, settings primitives).
  • Semantic tokens --Auth-* / --Ds-*; platform CSS bridge for flat-merge deployment.
  • Config-driven login: form1–form9 consolidated into single LoginForm configuration.

Changed​

  • Settings UI migrated to design system (waves 1–9); removed variant.css and legacy palette layer.
  • Login OTP sliders shared across forms; i18n for hardcoded login strings.

Fixed​

  • Login dark-theme consistency; a11y on method toggles; settings applications layout and sidebar polish.

Removed​

  • Legacy Text / root Button / duplicate login containers; profile identifier unlink flow (deferred).

[1.5.2] - 2026-06-16​

Migration Level: 🟢 PATCH​

Fixed​

  • Settings applications carousel layout and OAuth card webhook conditional rendering.
  • Save button dirty-state, double-submit guard, and webhook test flow.
  • User key card public key word wrap.

[1.5.1] - 2026-06-07​

Migration Level: 🟡 MINOR​

Consolidated release for dev → master promotion (versions 1.2.0–1.5.1).

Added​

  • Settings redesign: desktop shell, OAuth applications carousel, 2FA panel, mobile polish.
  • User key inline register/remove flows; app logo SVG upload; social link flow on Profile.
  • Nickname editing with client-side validation.

Changed​

  • Notification test switched to server-side push; design-token consolidation.

Fixed​

  • PWA install prompt capture before Preact mount; dropped hardcoded TeleStore branding; OAuth logo upload no longer sends app TimeTick as chatId.

[1.1.0] - 2026-02-04​

Migration Level: 🟡 MINOR​

Added​

  • SSE EventStream client service and hook for real-time events
  • Validation for error 1201
  • AI context documentation (CLAUDE.md)

Changed​

  • Refactoring attempts for cleaner architecture

Fixed​

  • Various UI fixes

[1.0.2] - 2026-01-27​

Migration Level: 🟢 PATCH​

Added​

  • Form10/11/12/13/14/15 new login forms
  • Route for changing password
  • Phone input validation
  • Adaptive design for small screens
  • User keys for adding new apps

Changed​

  • LoginMethod update
  • OAuth type handling
  • Removed Forgot and Device key pages

Fixed​

  • ExtendedLoginEmail
  • SVG rendering
  • Styles for Form10
  • Email input handling
  • Duplicate request issue

[1.0.1] - 2025-12-23​

Migration Level: 🟢 PATCH​

Added​

  • Button test component
  • Form10 implementation
  • IUserApps interface update

Changed​

  • Removed SCSS (CSS only)

Fixed​

  • Styles improvements
  • Loader component

[1.0.0] - 2025-12-05​

Migration Level: 🔴 MAJOR (Initial Stable Release)​

Added​

  • Authentication Forms
    • PassKey login (phone + password)
    • FIDO2/WebAuthn support
    • UserKey import
    • OAuth (Google, Telegram, Discord, GitHub, VK)
    • Phone/Email OTP
  • UI Components
    • Responsive design (Preact)
    • i18n translations
    • Custom hooks for auth flow
  • Integration
    • AuthProxy API client
    • Session management

[0.5.0] - 2024-11-01​

Migration Level: ALPHA​

Added​

  • Basic authentication screens
  • Session handling
  • API integration

[0.1.0] - 2024-10-07​

Migration Level: ALPHA​

Added​

  • Initial project structure
  • Preact setup
  • Build configuration (Vite)
  • CI/CD pipeline