kiootic

- remove msgpack - use https://github.com/kubernetes-sigs/yaml for yaml - use https://github.com/iawaknahc/jsonschema for validation - app_id optional (default constant in single teanant) - hostnames in config (merge from VALID_HOSTS) - watch...

Allow logging in existing user in promotion flow

11

User may select an existing identity in promotion flow. Currently, it would fail with an identity exists error. Use case instead requires user to perform authentication and log in using...

Currently, the web UI is a UI layered over the interaction flow state machine. We should review the flow state transition and ensure web UI handle them correctly. - SSO...

- Add `legacy_client` in OAuthClientConfiguration - Deprecate after some time - Reject invalid token and write try-refresh token if `legacy_client` is enabled. - Otherwise, don't care and pass directly to...

When anonymous users visits the settings page, it should instead prompt the user to 'sign up' (i.e. promote) as a real user, and provides a link to anonymous user promotion...

Improve forgot password error

4

Currently, when user attempt to reset password with a used code, it gives invalid code error. It should indicate the reset code is consumed instead. Also, user verification can indicate...

We should update the main API reference page: - Include links to latest release API references - Include links to past releases of API references - Use same UI as...

For example, if we tag commit `abc1234` as `v1.2.3` for `skygear-auth`, we should have following image tags: - `skygear-auth:git-abc1234` - `skygear-auth:v1.2` - `skygear-auth:v1.2.3`

Include session in user create event

4

Developers may be interested in session properties (e.g. IP, user agent) in user creation web-hook event. We should include the newly created session in user create event, so that: -...

- [ ] persistent event table - [ ] retry delivery - [ ] event list API - [ ] event re-delivery API