Hey @everyone , We have released the delete user API for the core. It's available for core versions >= 3.7. This is a non breaking change from the previous version of the core. If you are using self hosted and need assistance in updating the core, please DM me. If you want us to upgrade your managed service core version, please DM me as well. The docs for this: https://supertokens.io/docs/thirdpartyemailpassword/common-customizations/delete-user. You will need to be on the latest version of our backend SDK to have this function available. But if you don't want to update that, you can even call the API of the core directly (see https://supertokens.io/docs/cdi -> POST /user/remove API). For users using us only for the sessions recipe, this API makes no different to you as the ability to remove a session based on a userId is already there for older versions of the core.

@everyone we have released new docs for integration of SuperTokens with graphql. You can find them by visiting your recipe's docs > graphql section.

hey @everyone , we have released a new recipe for passwordless auth. This includes: - A new core version (v3.8), - New backend SDK versions - New supertokens-auth-react version Features: - Magic link and / or OTP based login / sign up - React based UI from our supertokens-auth-react SDK - Ability to add your own SMS / email sending service - New docs for passwordless recipe: https://supertokens.io/docs/passwordless/introduction Coming soon: - In built email / SMS sending ability (a new service made by us) - A passwordless demo app

hey @everyone , we just migrated our site from supertokens.io to supertokens.com. So in case you visit our site and were logged into .io, you will have to relogin to supertokens.com. Do let us know if you run into any issues please 🙂

hey @everyone , We have released a new core version (v3.9) and new backend SDK versions (all non breaking). New features: - Reset password POST API now also returns the userId whose password was reset - The core now accept a base path using which you can expose all of the core's APIs prefixed by some path. Learn more about this feature here: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/core/base-path

@everyone we have released language translation feature for our pre built React UI (supertokens-auth-react SDK >= v0.18.6). Feature details: - Define your own language translation strings for as many languages you want to support - Change the current language in real time. - Easily change the default text anywhere in our prebuilt UI - Load language translation strings asynchronously - Define custom translation keys - Use language translation React hook in custom components made via our override feature. - Integrate with libraries like i18n - Define a non english default language for the pre built UI See the docs to learn more: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/translations

@everyone we have released new versions all our backend SDKs: - This is a breaking change (please see the changlelog for if you need to make any code changes during upgrading) - The feature here is of providing "user context". This allows for powerful cusomtisations using which you can pass arbitrary data from the api functions override to the recipe function override. (Docs for this will be coming soon) For anyone using our python SDK, I strongly recommend upgrading to the latest version (0.5.0) since it has a few bug fixes + strong typings throughout the SDK.

hey @everyone we have a new feature: Argon2 password hashing, configure bcrypt log rounds, and a CLI tool to find the optimal hashing parameters based on your hardware. This is available for core versions >= 3.12 You can learn more about this here: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/password-hashing/about

hey @everyone New feature! You can now debug issues in the backend SDK by enabling debug logs: https://supertokens.com/docs/thirdpartyemailpassword/troubleshooting/how-to-troubleshoot These are really useful for debugging session related issues! We will be adding more logs to the SDKs soon to help debug other functionalities we well!

hey @everyone New feature! We now support integrating with a SAML provider through another really awesome open source project called BoxyHQ. We have a step by step guide on how to go about using BoxyHQ with SuperTokens to connect with a SAML provider: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/saml/what-is-saml

hey! New feature! We released a new recipe -> social / OAuth 2.0 login + passwordless login: https://supertokens.com/docs/thirdpartypasswordless/introduction

hey! New feature! Store user metadata with SuperTokens. You can now store / update any arbitrary JSON against a user with our usermetadata recipe: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/usermetadata/about

Hey! We launched a new API for sending SMSs and emails: Email sending: - Provide your SMTP server config and the backend SDK will send emails based on the initialised recipes. - Override email sending completely so that you can utilise any existing infra that you have to send emails. - Docs on https://supertokens.com/docs/thirdpartyemailpassword/email-delivery/about (for thirdpartyemailpassword recipe) - Debug logging when sending emails via our APIs SMS sending: - Provide your twilio account info and the backend SDK will send passwordless login SMSs. - Override SMS sending completely so that you can use your own existing infra to send SMS, or even send messages using whatsapp / fb messenger. - Use our new SuperTokens service for sending SMSs - over time, we will optimise this to reduce SMS cost and also fight against SMS spam / misuse. - Docs on https://supertokens.com/docs/passwordless/sms-delivery/about (for passwordless recipe) - Debug logging when sending SMSs via our APIs Available on SDK versions: - nodejs: >= 9.3.0 - golang: >= 0.6.8 - python: >= 0.8.4 This is a non breaking change - older methods / callback functions of sending emails / sms will still work as is.

Hey! We have updated the backend and frontend SDKs to allow for displaying custom error messages from API overrides. You can read about it here: https://supertokens.com/docs/thirdpartyemailpassword/advanced-customizations/apis-override/custom-response/general-error If you want to use this feature, you will need to upgrade both the frontend and backend SDKs: - supertokens-node >= 10.0.0 - supertokens-python >= 0.9.0 - supertokens-golang >= 0.7.0 - supertokens-website >= 13.0.0 - supertokens-auth-react >= 0.23.0

Hey! We have released a new vanilla JS SDK: supertokens-web-js, which provides session management, and helper functions for all the login methods / recipes so that it's easier for you to build your custom UI. We have also added new docs for Angular integration with our react SDK, so that you can use SuperTokens' UI in your angular app.

Hey! A new version of supertokens-auth-react SDK (v0.24.0) has been released: - You can wrap your entier app in

<SuperTokensWrapper>

which allows you to access the session context from anywhere component in your app easily. - The auth wrapper support SSR rendering for NextJS apps, so you don't need to use the

dynamic

HOC anymore. This is a breaking change since the return type of

useSessionContext()

now has a

loading

state. Please see the changelog for migration steps.

Hey! New blog post for people who want to use the SuperTokens pre built UI in a VueJS app: https://supertokens.com/blog/how-to-use-supertokens-pre-built-ui-with-vuejs

Hey @everyone We have released user roles feature: https://supertokens.com/docs/userroles/introduction - Using this, you can associate an array of permissions to a role and an array of roles to a user. - You can also modify the session to add the roles and permissions so that you can protect frontend routes an APIs based on the role of the user.

Hey! We have released new docs for 2FA auth with email / SMS OTP as the second factor: https://supertokens.com/docs/mfa/introduction

hey! We have added new docs for microservice authentication using SuperTokens: https://supertokens.com/docs/microservice_auth/introduction

Hey! We released a new version of the core (3.16) which allows you to set different log levels: https://github.com/supertokens/supertokens-core/issues/494#issuecomment-1219446095

Hey! We have added docs for integrating our pre built UI with a Vue JS app now. We also added a blog for building custom UI with VueJS: https://supertokens.com/blog/how-to-use-supertokens-custom-ui-with-vuejs

Hey! We have updated the dashboard on supertokens.com to allow you to create / remove multiple core API keys.

Hey! We have released two new features: - Session claims checking -> this allows you to define custom session claim validation logic which you can use to protect your frontend / backend API routes based on the claims in a session. It affects user roles and email verification recipes. This is a breaking change. - A CLI to create a new app with supertokens that let's you choose your tech stack and the login type:

npx create-supertokens-app

hey @everyone ! A few new features & docs changes: - 1) New docs for custom UI! If you visit our recipe docs now, you will see two sections "Quick setup with Pre built UI" and "Using custom UI". The custom UI section guides you through all the flows that you need to implement for the chosen recipe. - 2) A new migration API which allows you to directly import password hashes into SuperTokens. Checkout our new migration docs for the recipe you are interested in. - 3) IP whitelisting for managed service (paid tier feature): You can now specify list of IP address of your backend servers which are going to query the core. The core will then accept requests only from those IP addresses. This safeguards against misuse of the core API key. - 4) Core error alerting for managed service (paid feature): Get alerts when the core throws an error - very useful during debugging and for uptime alerts. To get access to the two new paid features, please visit your supertokens.com dashboard, and click on the "i'm interested" button on the banner on top.

hey! For users of our managed service, we now allow you to clear data in the dev env with a click of a button - useful for debugging / development purposes.

hey! We have updated the frontend SDKs to add session interception to XHR. This means that you no longer need to add axios interceptors explicitly and interception would also work for Angulat's httpClient library!

Dashboard

Hey! We have added new docs for account deduplication. It prevents users from signing up with a different method using the same email. Check it out here: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/deduplication/overview

Hey! We have added new docs for how to disable public facing sign up and instead add users via allow lists or via invite links: https://supertokens.com/docs/thirdpartyemailpassword/common-customizations/disable-sign-up/overview