Device-aware sessions and trusted devices
Sessions now know which device they belong to, with a trusted-device flow and configurable security emails.
Added
3- AuthenticationSessions are bound to a device, so a person can see where they are signed in and sign out one device without ending every session.
- AuthenticationA trusted-device flow, with an organization-level toggle for whether to offer it.
- AuthenticationConfigurable notification emails for authentication events, so you decide which ones reach your users.
Improved
1- AuthenticationSocial login and password login now follow one unified path, with the handoff after a social callback hardened.
Fixed
1- AuthenticationCache leaks in the session layer, found while consolidating the login flows.