fortify

• Revert "Add rate limiter for a registration" by @taylorotwell in https://github.com/laravel/fortify/pull/465

• Add rate limiter for a registration by @trbsi in https://github.com/laravel/fortify/pull/460

• Add ability to override routes with custom paths by @stephenglass in https://github.com/laravel/fortify/pull/458

Added

• Laravel v10 Support by @driesvints in https://github.com/laravel/fortify/pull/435

Changed

• Update PrepareAuthenticatedSession.php by @francoism90 in https://github.com/laravel/fortify/pull/434
• Uses PHP Native Type Declarations 🐘 by @nunomaduro in https://github.com/laravel/fortify/pull/421

Fixed

• Fix error while preparing PasswordResetResponse with views turned off by @leonkllr0 in https://github.com/laravel/fortify/pull/433

Changed

• Only fire event when actually updating the database to disable two factor authentication by @taylorotwell in https://github.com/laravel/fortify/commit/04b4b9c20e421c415d0427904a72e08a21bdec27

Added

• Add more Response contract bindings by @bdsumon4u in https://github.com/laravel/fortify/pull/425

Changed

• Update parameter order for hash_equals function in TwoFactorLoginRequest by @jayan-blutui in https://github.com/laravel/fortify/pull/422

Fixed

• Use boolean rather than filled for remember by @Codeatron5000 in https://github.com/laravel/fortify/pull/423

Fixed

• Fix error message when entering invalid 2fa code by @emargareten in https://github.com/laravel/fortify/pull/415
• Use Fortify username method on ConfirmPassword action by @jayan-blutui in https://github.com/laravel/fortify/pull/420

Changed

• Add and use constants for session flashes by @dwightwatson in https://github.com/laravel/fortify/pull/409
• Use current_password rule when changing password by @dwightwatson in https://github.com/laravel/fortify/pull/410
• Parameters order with hash_equals by @chivincent in https://github.com/laravel/fortify/pull/411

Fixed

• Only save user if need to by @taylorotwell in https://github.com/laravel/fortify/commit/9a68cf2deb37d1796b6e2fd97d3c61f086868914

Changed

• Return recovery errors under the recovery_code key by @jessarcher in https://github.com/laravel/fortify/pull/401

Fixed

• Fix second usage of 2FA code by @xwillq in https://github.com/laravel/fortify/pull/399

Fixed

• Call FailedTwoFactorLoginResponse::toResponse with TwoFactorLoginRequest by @ricklambrechts in https://github.com/laravel/fortify/pull/395

Added

• Added config option for custom OTP window by @robtesch in https://github.com/laravel/fortify/pull/385

Changed

• 2FA setup key by @ps-sean in https://github.com/laravel/fortify/pull/371
• Enable 2FA confirmation by default by @taylorotwell in https://github.com/laravel/fortify/commit/a6caadc80e348755de0e1da221a6253d9f2c48f9

Fixed

• Fix double error message for failed 2FA response by @driesvints in https://github.com/laravel/fortify/pull/369

Fixed

• Ensures route password.confirm is defined when not using views by @Frozire in https://github.com/laravel/fortify/pull/368

Security

• Cache 2FA token timestamp by @driesvints in https://github.com/laravel/fortify/pull/366

Fixed

• Fix Exception when sending empty 2FA confirmation code by @srdante in https://github.com/laravel/fortify/pull/361
• Unsupported operand types on rollback migration by @Jackpump in https://github.com/laravel/fortify/pull/362

Changed

• Include the otpauth url when retrieving the QR svg by @JanMisker in https://github.com/laravel/fortify/pull/356
• Confirmable 2FA by @taylorotwell in https://github.com/laravel/fortify/pull/358

Fixed

• Fix incorrect key for error bag by @vaibhavpandeyvpz in https://github.com/laravel/fortify/pull/360

Changed

• Prevent new login after 2FA challenge (#353)

Security

• Fix throttle bypass exploit (#354)