Releases: web-eid/web-eid.js
v2.1.0-beta.0
mrts
Mart Sõmermaa
This version is compatible with modern build tools
Use this version with latest Vite-based frontend build tools (used in newer Angular, React, Vue and other frontend frameworks), the older v2.0.2 version may no longer work with them. See #58 for examples.
Packages
The v2.1.0-beta.0 NPM package is available in Web eID GitLab NPM package registry and a ZIP file with pre-built IIFE, ES and UMD bundles is attached as an asset.
What's Changed
- chore(deps-dev): bump @babel/traverse from 7.15.4 to 7.23.2 by @dependabot[bot] in #48
- Update copyright year by @metsma in #51
- updated documentation: import ES module by @ydanneg in #40
- Fix a missing comma and an incorrect json property name in README by @zutnop in #50
- chore(deps-dev): bump braces from 3.0.2 to 3.0.3 by @dependabot[bot] in #52
- chore(deps-dev): bump ws from 7.5.5 to 7.5.10 by @dependabot[bot] in #53
- Upgrade Rollup to v3 by @mrts in #55
- Updated dependencies by @taneltm in #56
- Fix unable to load library in Angular by @taneltm in #57
- chore(deps-dev): bump form-data from 4.0.1 to 4.0.4 by @dependabot[bot] in #59
- Update Github Actions builds by @metsma in #60
- chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #61
- build(deps-dev): update dependencies by @mrts in #62
- Fix TypeError when receiving messages without action property by @ErkoRisthein in #64
- chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #65
- build: version bump to 2.1.0-beta.0 by @svenzik in #67
New Contributors
- @ydanneg made their first contribution in #40
- @zutnop made their first contribution in #50
- @ErkoRisthein made their first contribution in #64
- @svenzik made their first contribution in #67
Full Changelog: v2.0.2...v2.1.0-beta.0
Contributors
Assets 3
v2.0.2
v2.0.2 is a minor maintenance release that mostly updates build dependencies.
Changes
Full changelog: v2.0.1...v2.0.2.
Packages
The v2.0.2 NPM package is available in Web eID GitLab NPM package registry and a ZIP file with pre-built IIFE, ES and UMD bundles is attached as an asset.
v2.0.1
v2.0.1 is a minor maintenance release that mostly updates dependencies.
Changes
See the list of changes in the v2.0.1 milestone.
Packages
The v2.0.1 NPM package is available in Web eID GitLab NPM package registry and a ZIP file with pre-built IIFE, ES and UMD bundles is attached as an asset.
v2.0.0
v2.0.0 is a major backwards incompatible release.
In web-eid.js API version 1, the authenticate() and sign() functions took URLs as parameters and the network requests to the website back end were performed inside the extension. This had many benefits, including reduced surface for XSS attacks, additional internal security checks and control over the interaction flow with the user. However, the network requests indirectly caused a Cross-Origin Resource Sharing (CORS) vulnerability in Firefox.
To mitigate the CORS vulnerability in Firefox, the web-eid.js API version 2 no longer handles network requests internally; the website developer is expected to perform the requests instead.
Upgrade instructions are available here.
Changes
See the list of changes in the v2.0.0 milestone.
Backwards incompatible changes
All API function signatures have changed in v2.0.0, see upgrade instructions.
Packages
The v2.0.0 NPM package is available in the Web eID GitLab NPM package registry.
v2.0.0-rc1
feat: version checking removed from library Version checking will be implemented on the extension side for greater flexibility Signed-off-by: Tanel Metsar <tanel.metsar@cgi.com>