v2.186.0

2.186.0 (2026-01-28)

Features

• Add email send operation metrics (#2311) (0096575)
• add Supabase Auth identifier to OAuth redirect URLs (#2299) (2d3dbc6)
• log sb-auth-user-id, sb-auth-session-id, ... on sign in not just refresh token (#2342) (a486ada)
• oauth-server: store and enforce token_endpoint_auth_method (#2300) (bcd6cd5)
• replace JWT OAuth state with flow_state.id UUID (#2331) (645654d)
• upgrade existing sessions to v2 refresh tokens though config value (#2356) (6fb0e8a)
• Add Sb-Forwarded-For header and IP-based rate limiting (#2295) (e8f679b)
• allow amr claim to be array of strings or objects (#2274) (607da43)
• Treat rate limit header value as comma-separated list (#2282) (5f2e279)

Bug Fixes

• reloader unittest races on writeWg (#2352) (088b714)
• update migration version (#2343) (61ef4db)
• check each type independently (#2290) (d9de0af)
• fix the wrong error return value (#1950) (e2dfb5d)
• indexworker: remove pg_trgm extension (#2301) (c553b10)
• oauth-server: allow custom URI schemes in client redirect URIs (#2298) (ea72f57)
• tighten email validation rules (#2304) (33bb372)

Checksums

SHA1

auth-v2.186.0-arm64.tar.gz:

94cd063227e01dcc71811aa63ecdd996d0c0419c

auth-v2.186.0-x86.tar.gz:

8528d7b324e161496bafcec6edcf70ae58d108e9

auth-v2.186.0-arm64.tar.xz:

64d85ed460b5ec01359a997b8f07e1ba71781cc8

SHA256

auth-v2.186.0-arm64.tar.gz:

61aa53ea5e2d7e4f50f2b10312c1e6b73e4767b753815239956082fdcc623270

auth-v2.186.0-x86.tar.gz:

2683b9549e922d0644621129fdabd7edb8b78c35274e133e61a3280ad9675161

auth-v2.186.0-arm64.tar.xz:

0404eef4bc6845652c9672fa375882af69e4464818f9ab1249d6826c0572b863

v2.186.0-rc.14

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.14-arm64.tar.gz:

98ac89b6b59f2e0191f61bfd528ef34a7f17abd9

auth-v2.186.0-rc.14-x86.tar.gz:

39ef0826143a9154e9d5cad157b9627ccd38e684

auth-v2.186.0-rc.14-arm64.tar.xz:

96443ea848482f76709bf5a65fac3b8765b9cf28

SHA256

auth-v2.186.0-rc.14-arm64.tar.gz:

49d77edcdba72717c5c4ce02eea8cbceab523a3912737dbd9560a1a0818c4a6c

auth-v2.186.0-rc.14-x86.tar.gz:

f981324eabc3afeca09ce7eeab30c0eac2886611e712b4dc83081a58e3172e5b

auth-v2.186.0-rc.14-arm64.tar.xz:

5dd94fdda3b68b540d9a24756d19f0af5008083939ad6f30846125b63fd9d4e3

Checksums

SHA1

auth-v2.186.0-rc.14-arm64.tar.gz:

98ac89b6b59f2e0191f61bfd528ef34a7f17abd9

auth-v2.186.0-rc.14-x86.tar.gz:

39ef0826143a9154e9d5cad157b9627ccd38e684

auth-v2.186.0-rc.14-arm64.tar.xz:

96443ea848482f76709bf5a65fac3b8765b9cf28

SHA256

auth-v2.186.0-rc.14-arm64.tar.gz:

49d77edcdba72717c5c4ce02eea8cbceab523a3912737dbd9560a1a0818c4a6c

auth-v2.186.0-rc.14-x86.tar.gz:

f981324eabc3afeca09ce7eeab30c0eac2886611e712b4dc83081a58e3172e5b

auth-v2.186.0-rc.14-arm64.tar.xz:

5dd94fdda3b68b540d9a24756d19f0af5008083939ad6f30846125b63fd9d4e3

v2.186.0-rc.10

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.10-arm64.tar.gz:

d153ff38700d67fcc0e99e3d18eb00bf96090a08

auth-v2.186.0-rc.10-x86.tar.gz:

3ef9ce1f5e256cc53b0df9f2d56649be54816303

auth-v2.186.0-rc.10-arm64.tar.xz:

7d43037abf4a19b42dd365a4c6d37fae65af23d2

SHA256

auth-v2.186.0-rc.10-arm64.tar.gz:

e3bcf34b9ebb073e5cb4295e83c51313fa64c11491721715755dd0c441a5a8e0

auth-v2.186.0-rc.10-x86.tar.gz:

b4692eb83d82cdf8a22959a778d15a2308943480c6a19f5739fcc5663260c4f4

auth-v2.186.0-rc.10-arm64.tar.xz:

dc47101a05a5b77bc5c58191233bddf9ea9d8f6611da3dda263c4822f1bdb738

Checksums

SHA1

auth-v2.186.0-rc.10-arm64.tar.gz:

d153ff38700d67fcc0e99e3d18eb00bf96090a08

auth-v2.186.0-rc.10-x86.tar.gz:

3ef9ce1f5e256cc53b0df9f2d56649be54816303

auth-v2.186.0-rc.10-arm64.tar.xz:

7d43037abf4a19b42dd365a4c6d37fae65af23d2

SHA256

auth-v2.186.0-rc.10-arm64.tar.gz:

e3bcf34b9ebb073e5cb4295e83c51313fa64c11491721715755dd0c441a5a8e0

auth-v2.186.0-rc.10-x86.tar.gz:

b4692eb83d82cdf8a22959a778d15a2308943480c6a19f5739fcc5663260c4f4

auth-v2.186.0-rc.10-arm64.tar.xz:

dc47101a05a5b77bc5c58191233bddf9ea9d8f6611da3dda263c4822f1bdb738

v2.186.0-rc.9

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.9-arm64.tar.gz:

df38e594515df4d4f5170fe62c7965c9ffc6bd34

auth-v2.186.0-rc.9-x86.tar.gz:

40252532ecefbcb5a5108fa765da5e01be393838

auth-v2.186.0-rc.9-arm64.tar.xz:

38ca61bd5df36a6f247c802d1992f7d4b0ac0741

SHA256

auth-v2.186.0-rc.9-arm64.tar.gz:

870e9232ee7af90c4421c9913e09f23c5795173133956fa0b7907cffc55bd04f

auth-v2.186.0-rc.9-x86.tar.gz:

befc5c2ba047435f61eb4f541586046ef03f359e0ca28171c5a8e03c07a58067

auth-v2.186.0-rc.9-arm64.tar.xz:

d729526935dfb8e7f77098b4d6492806361770771ff894587de053d386044c81

Checksums

SHA1

auth-v2.186.0-rc.9-arm64.tar.gz:

df38e594515df4d4f5170fe62c7965c9ffc6bd34

auth-v2.186.0-rc.9-x86.tar.gz:

40252532ecefbcb5a5108fa765da5e01be393838

auth-v2.186.0-rc.9-arm64.tar.xz:

38ca61bd5df36a6f247c802d1992f7d4b0ac0741

SHA256

auth-v2.186.0-rc.9-arm64.tar.gz:

870e9232ee7af90c4421c9913e09f23c5795173133956fa0b7907cffc55bd04f

auth-v2.186.0-rc.9-x86.tar.gz:

befc5c2ba047435f61eb4f541586046ef03f359e0ca28171c5a8e03c07a58067

auth-v2.186.0-rc.9-arm64.tar.xz:

d729526935dfb8e7f77098b4d6492806361770771ff894587de053d386044c81

v2.186.0-rc.8

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.8-arm64.tar.gz:

f90537ffb577a754a24dbcf41aaec4bce51ed93f

auth-v2.186.0-rc.8-x86.tar.gz:

8b91dc521bef7062d9e2a1577225f2a332940e11

auth-v2.186.0-rc.8-arm64.tar.xz:

5904578def93d8546778b1a902363d3d751501cd

SHA256

auth-v2.186.0-rc.8-arm64.tar.gz:

468aa696c2cdae8dfd540a0878f7ca55c28f2960171e749bf62b8643662d5fdb

auth-v2.186.0-rc.8-x86.tar.gz:

a95dca010f305643b0fef89428cb27e025e2737902ee4991d5b9ef7b7e6951d7

auth-v2.186.0-rc.8-arm64.tar.xz:

6d4862781cd38a970cffcb2a3f067ee81feae5aac289e33a5dd0714fa5b80b45

Checksums

SHA1

auth-v2.186.0-rc.8-arm64.tar.gz:

f90537ffb577a754a24dbcf41aaec4bce51ed93f

auth-v2.186.0-rc.8-x86.tar.gz:

8b91dc521bef7062d9e2a1577225f2a332940e11

auth-v2.186.0-rc.8-arm64.tar.xz:

5904578def93d8546778b1a902363d3d751501cd

SHA256

auth-v2.186.0-rc.8-arm64.tar.gz:

468aa696c2cdae8dfd540a0878f7ca55c28f2960171e749bf62b8643662d5fdb

auth-v2.186.0-rc.8-x86.tar.gz:

a95dca010f305643b0fef89428cb27e025e2737902ee4991d5b9ef7b7e6951d7

auth-v2.186.0-rc.8-arm64.tar.xz:

6d4862781cd38a970cffcb2a3f067ee81feae5aac289e33a5dd0714fa5b80b45

v2.186.0-rc.7

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.7-arm64.tar.gz:

1d87e91fad0135ed18f4a38fb22d7d2d630936e4

auth-v2.186.0-rc.7-x86.tar.gz:

39dc7743ea53d12d7e203c0d962a03055be3801c

auth-v2.186.0-rc.7-arm64.tar.xz:

cbe98836ffccbaad544769b038496c903cd7307f

SHA256

auth-v2.186.0-rc.7-arm64.tar.gz:

11407e5c024fe9404c93ed1ef21825fb66c0c0a2c01e6b01365b3c170088fd63

auth-v2.186.0-rc.7-x86.tar.gz:

8e275a0808537356e68099e3a136aa136811558e15870fba6f52139ddfe87481

auth-v2.186.0-rc.7-arm64.tar.xz:

7fb0b5668e55db5549f087c6a199f9f0b3465dea1098545a5378dfd1e799bd4d

Checksums

SHA1

auth-v2.186.0-rc.7-arm64.tar.gz:

1d87e91fad0135ed18f4a38fb22d7d2d630936e4

auth-v2.186.0-rc.7-x86.tar.gz:

39dc7743ea53d12d7e203c0d962a03055be3801c

auth-v2.186.0-rc.7-arm64.tar.xz:

cbe98836ffccbaad544769b038496c903cd7307f

SHA256

auth-v2.186.0-rc.7-arm64.tar.gz:

11407e5c024fe9404c93ed1ef21825fb66c0c0a2c01e6b01365b3c170088fd63

auth-v2.186.0-rc.7-x86.tar.gz:

8e275a0808537356e68099e3a136aa136811558e15870fba6f52139ddfe87481

auth-v2.186.0-rc.7-arm64.tar.xz:

7fb0b5668e55db5549f087c6a199f9f0b3465dea1098545a5378dfd1e799bd4d

v2.186.0-rc.6

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.6-arm64.tar.gz:

5cf6cd56f7386199fabd426aaf484fbb58c85785

auth-v2.186.0-rc.6-x86.tar.gz:

2cd7cd23c47e5db3bf74f67d5a0764d56db755e2

auth-v2.186.0-rc.6-arm64.tar.xz:

8ab5d54aca934a05588b50f3c4b2eb554ea2015d

SHA256

auth-v2.186.0-rc.6-arm64.tar.gz:

80d2d617ed6cec9af07ebf6d4bbdd1d9a225529f7c63810aba4c09be548aa9aa

auth-v2.186.0-rc.6-x86.tar.gz:

de8508e230191b6e2635fbf8078e153b63499cf8dc7db7fa4168448c6cb02a70

auth-v2.186.0-rc.6-arm64.tar.xz:

34f474dd2cd226829761152e5f523015784ecc7568f780f44276ce8fbfc53933

Checksums

SHA1

auth-v2.186.0-rc.6-arm64.tar.gz:

5cf6cd56f7386199fabd426aaf484fbb58c85785

auth-v2.186.0-rc.6-x86.tar.gz:

2cd7cd23c47e5db3bf74f67d5a0764d56db755e2

auth-v2.186.0-rc.6-arm64.tar.xz:

8ab5d54aca934a05588b50f3c4b2eb554ea2015d

SHA256

auth-v2.186.0-rc.6-arm64.tar.gz:

80d2d617ed6cec9af07ebf6d4bbdd1d9a225529f7c63810aba4c09be548aa9aa

auth-v2.186.0-rc.6-x86.tar.gz:

de8508e230191b6e2635fbf8078e153b63499cf8dc7db7fa4168448c6cb02a70

auth-v2.186.0-rc.6-arm64.tar.xz:

34f474dd2cd226829761152e5f523015784ecc7568f780f44276ce8fbfc53933

v2.186.0-rc.5

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.5-arm64.tar.gz:

fd4c2c0e6c176d31143b184bd33aa7f7582c4069

auth-v2.186.0-rc.5-x86.tar.gz:

2f694c9ceb0e4211373e3c6f8d9ce96300781e23

auth-v2.186.0-rc.5-arm64.tar.xz:

d32aa98369e8a50ea0a47f83e6346a77568eebbd

SHA256

auth-v2.186.0-rc.5-arm64.tar.gz:

95421a772f822ca06b8e2b1e759bff57252a2c1a8eb8ef46820d15ad1cff2c4c

auth-v2.186.0-rc.5-x86.tar.gz:

bc63b52db64e2dac5678b6b78890950ce501b97906db3e1b02a48e5ad7948569

auth-v2.186.0-rc.5-arm64.tar.xz:

740bc819d8079cbb4cef8ad9c8603f5479918bb84ee828d532e2e26a871c9c02

Checksums

SHA1

auth-v2.186.0-rc.5-arm64.tar.gz:

fd4c2c0e6c176d31143b184bd33aa7f7582c4069

auth-v2.186.0-rc.5-x86.tar.gz:

2f694c9ceb0e4211373e3c6f8d9ce96300781e23

auth-v2.186.0-rc.5-arm64.tar.xz:

d32aa98369e8a50ea0a47f83e6346a77568eebbd

SHA256

auth-v2.186.0-rc.5-arm64.tar.gz:

95421a772f822ca06b8e2b1e759bff57252a2c1a8eb8ef46820d15ad1cff2c4c

auth-v2.186.0-rc.5-x86.tar.gz:

bc63b52db64e2dac5678b6b78890950ce501b97906db3e1b02a48e5ad7948569

auth-v2.186.0-rc.5-arm64.tar.xz:

740bc819d8079cbb4cef8ad9c8603f5479918bb84ee828d532e2e26a871c9c02

v2.186.0-rc.4

This is a release candidate. See release-please PR #2337 for context.

Checksums

SHA1

auth-v2.186.0-rc.4-arm64.tar.gz:

1428a9edd9595e92d36d1091a669b662d883651b

auth-v2.186.0-rc.4-x86.tar.gz:

dbe9cbb4f1fbf7d64c032d8ab756b4377ecb3b0f

auth-v2.186.0-rc.4-arm64.tar.xz:

06b09758f7b0efd5aa47c44cb5ba12b57efd9edd

SHA256

auth-v2.186.0-rc.4-arm64.tar.gz:

1add01c63df4cf8ca77586c1312831a75b2c11f8da7251d6a226752d7d2ec3fd

auth-v2.186.0-rc.4-x86.tar.gz:

41da4ef00a7691b1515a2e199b7967d3ebf0560c30eb9728417f24922ccb8842

auth-v2.186.0-rc.4-arm64.tar.xz:

f8eb89607a29fc7e0fb63caaea47c462bcedaa0632ab7aad4a1cfba1408da239

Checksums

SHA1

auth-v2.186.0-rc.4-arm64.tar.gz:

1428a9edd9595e92d36d1091a669b662d883651b

auth-v2.186.0-rc.4-x86.tar.gz:

dbe9cbb4f1fbf7d64c032d8ab756b4377ecb3b0f

auth-v2.186.0-rc.4-arm64.tar.xz:

06b09758f7b0efd5aa47c44cb5ba12b57efd9edd

SHA256

auth-v2.186.0-rc.4-arm64.tar.gz:

1add01c63df4cf8ca77586c1312831a75b2c11f8da7251d6a226752d7d2ec3fd

auth-v2.186.0-rc.4-x86.tar.gz:

41da4ef00a7691b1515a2e199b7967d3ebf0560c30eb9728417f24922ccb8842

auth-v2.186.0-rc.4-arm64.tar.xz:

f8eb89607a29fc7e0fb63caaea47c462bcedaa0632ab7aad4a1cfba1408da239

v2.185.0

2.185.0 (2026-01-12)

Bug Fixes

• additional provider and issuer checks (#2326) (cb79a74)

Checksums

SHA1

auth-v2.185.0-arm64.tar.gz:

a5e7d5329b7ef7042185ad10b5cc8e3c12b520e4

auth-v2.185.0-x86.tar.gz:

78ef92bbbae9d24e142feb9249d6b8f57dca282f

auth-v2.185.0-arm64.tar.xz:

0e3e5dd33dc97ee38be31b8eae00c698915f6514

SHA256

auth-v2.185.0-arm64.tar.gz:

e7562ee28a0b06065e007e4a988d067f70354ac8ba172635dde9ffb73e7aedaf

auth-v2.185.0-x86.tar.gz:

17480f9fbe0edd7b8819aa7422815ed1428aaf97a26fcbb0ff128cbcf93ca874

auth-v2.185.0-arm64.tar.xz:

14d7149533a28f8d2764aa3fc95f4e3762c1e3e9ac738070798050b4e6271c0a