Release archive
Release archive
Product, SDK, security, and operational changes across ZKAuth. Every entry states its availability and links to the documentation that governs it.
20 releases
Security researchers can now submit bounded reports through a monitored public channel with validation and abuse controls.
Mohith / 4 min readRead releaseThe dashboard moved to stable Turbopack and a TypeScript 7 check while deferring expensive browser features until they are needed.
Mohith / 5 min readRead releaseBilling event handling now records provider state before applying ordered changes, making duplicate delivery and retries safer.
Mohith / 4 min readRead releaseHosted and proxy requests now select the intended project-key environment explicitly instead of relying on an ambiguous active key.
Mohith / 4 min readRead releaseProof V2 binds authentication to one short-lived request, while Access Pass explores identity-hidden membership and role-threshold authorization.
Mohith / 6 min readRead releasezkauth-client@1.5.0 became the stable hosted-integration package with clearer trusted-server and browser proxy boundaries.
Mohith / 3 min readRead releaseA controlled GitHub OAuth callback can complete through the helper-owned route while uncertain account linking stays in manual review.
Mohith / 3 min readRead releasePublic component status and incident feeds arrived alongside a shared contract that separates user errors from internal diagnostics.
Mohith / 3 min readRead releaseThe dashboard gained provider configuration, OIDC discovery and JWKS refresh, plus reveal-once SCIM token issuance for preview testing.
Mohith / 5 min readRead releaseThe stable client and developer guides were aligned across project setup, callbacks, verification, device approval, reset, logs, and webhooks.
Mohith / 3 min readRead releaseDevice approval and denial links now resolve to constrained hosted pages or a verified project callback without exposing upstream errors.
Mohith / 3 min readRead releaseProjects can configure exact callback destinations for verification and approval results, with safe hosted fallbacks when no redirect is valid.
Mohith / 4 min readRead release