Wednesday, December 18, 2024
1 change · saas-17.4
Security fixes and vulnerability patches
Signup and password reset links now include the related user accounts when they are created. If the users linked to a partner change, older links stop working and a fresh link is required, reducing the risk of outdated access links being reused.
Original PR description
Add the user_ids to the token for the signup and reset password of the user. This prevent to token to work if there was a change to the users of the partner, effectively requiring the generation of a new token.