CHANGELOG-v10.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

10.1.0 - unreleased

Changed

• Update module to work with OXID eShop 7.3

10.0.0 - 2024-11-27

This is stable release for v10.0.0. No changes have been made since v10.0.0-rc.1.

10.0.0-rc.1 - 2024-11-04

Added

• DataType\Filter\StringFilter::matches() to check if string match the filter conditions
• Refresh token functionality
  • New queries:
    • OxidEsales\GraphQL\Base\Controller\Login::login
    • OxidEsales\GraphQL\Base\Controller\Token::refresh
  • New datatypes:
    • OxidEsales\GraphQL\Base\DataType\Login as a return type for login query, containing refresh and access token
    • OxidEsales\GraphQL\Base\DataType\RefreshToken
  • New event:
    • OxidEsales\GraphQL\Base\Event\BeforeTokenCreation
  • New services:
    • OxidEsales\GraphQL\Base\Service\CookieService
    • OxidEsales\GraphQL\Base\Service\FingerprintService
    • OxidEsales\GraphQL\Base\Service\HeaderService
    • OxidEsales\GraphQL\Base\Service\LoginService
    • OxidEsales\GraphQL\Base\Service\RefreshTokenService
  • New configuration options:
    • sRefreshTokenLifetime - options for refresh token lifetime, from 24 hours to 90 days
    • sFingerprintCookieMode - option for the authentication fingerprint cookie mode, same or cross origin
• Access and refresh tokens are now invalidated when the user's password is changed
  • New methods:
    • OxidEsales\GraphQL\Base\Infrastructure\RefreshTokenRepositoryInterface::invalidateUserTokens
    • OxidEsales\GraphQL\Base\Infrastructure\Token::invalidateUserTokens
    • OxidEsales\GraphQL\Base\Infrastructure\Token::isTokenExpired
  • New event subscriber:
    • OxidEsales\GraphQL\Base\Event\Subscriber\PasswordChangeSubscriber

Changed

• Renamed OxidEsales\GraphQL\Base\Infrastructure\Token::cleanUpTokens() to deleteOrphanedTokens()