1.2.0
- The deprecated
bind
method from jQuery has been replaced withon
, see #1184. - The development dependencies have been updated and unused dependencies have been removed, see #1182, #1161, #1183.
- JSHint has been replaced with ESLint, see #1185, #1186.
All changes since 1.1.0 are:
- The
getOwner
function is now read from theEmber
object instead of importing it fromember-getowner-polyfill
which fixes a deprecation, see #1124. - Transitions are no longer aborted in the
AuthenticatedRouteMixin
andUnauthenticatedRouteMixin
which was simply unnecessary, see #1126. - There is now an assertion checking that a valid authorizer has been passed to the session's
authorize
method, see #1132. - The attempted transition is now being stored in a cookie when Ember Simple Auth intercepts a transition and redirects to the login route in the
AuthenticatedRouteMixin
so that the transition can be retried in the browser, see #1136. - The
ember-cookies
dependency has been updated to 0.0.11 which fixes a deprecation, see #1153. - Ember Simple Auth now longer uses
Ember.K
, see #1166. - Deprecated ways to use Ember's deprecations which caused a deprecation themselves have been fixed, see #1170.
- There is now a warning when a
cookieExpirationTime
lower than 90 seconds is set as that will lead to problems with Ember Simple Auth's session time extension mechanism, see #1160. - Several parts of the documentation have been fixed and a new guide on implementing authentication with github has been added, see #1143, #1142, #1121, #1139.
- Ember Simple Auth now supports FastBoot out-of-the-box (when using the cookie session store), see #1035.
- Ember CLI's new
rootURL
setting is now used correctly, see #1070. - The cookie session store will now rewrite its cookies when any of its configurable properties (like cookie name) change, see #1056.
- The
DataAdapterMixin
now also overrides theheadersForRequest
method which makes it behave correctly with Ember Data 1.7 and above, see #1033. - Configurable routes like the login route etc. are now configured via overriding properties of the respective route mixins instead of settings in
config/environment.js
, see #985. - The OAuth 2.0 Passwort Grant authenticator now allows to define custom headers to be sent with authentication requests, see #1018.
- Authenticators can now reject with the server response when requests fail, see #1012.
- Server responses are now validated before authenticators resolve authentication, see #957.
- The offset that the OAuth 2.0 Password Grant authenticator uses when refreshing access tokens is now defined in an (overridable) property, see #840.
- The default cookie names that the cookie session store uses are now compliant with RFC 2616, see #978.