diff --git a/CHANGELOG.md b/CHANGELOG.md index 2833341..d6cb402 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,16 @@ +# 1.1.0 (2015-06-18) + +Bugfixes: +- N/A + +Features: +- ADD option.skipForceSessionSave to support cookie-session middleware +- UPDATE to latest dependencies +- UPDATE example to work with latest dependencies + +Documentation: +- N/A + # 1.0.9 (2015-02-14) Bugfixes: diff --git a/README.md b/README.md index b9a1193..982c0ef 100644 --- a/README.md +++ b/README.md @@ -89,7 +89,7 @@ app.use(passwordless.sessionSupport()); app.use(passwordless.acceptToken({ successRedirect: '/'})); ``` -`sessionSupport()` makes the login persistent, so the user will stay logged in while browsing your site. Make sure to have added your session middleware *before* this line. Have a look at [express-session](https://github.com/expressjs/session) how to setup sessions if you are unsure. +`sessionSupport()` makes the login persistent, so the user will stay logged in while browsing your site. Make sure to have added your session middleware *before* this line. Have a look at [express-session](https://github.com/expressjs/session) how to setup sessions if you are unsure. Please be aware: If you decide to use [cookie-session](https://github.com/expressjs/cookie-session) rather than e.g. express-session as your middleware you have to set `passwordless.init(tokenStore, {skipForceSessionSave:true})` `acceptToken()` will accept incoming tokens and authenticate the user (see the URL in step 5). While the option `successRedirect` is not strictly needed, it is strongly recommended to use it to avoid leaking valid tokens via the referrer header of outgoing HTTP links. When provided, the user will be forwarded to the given URL as soon as she has been authenticated. diff --git a/docs/Passwordless.html b/docs/Passwordless.html index 1571f72..8fd869a 100644 --- a/docs/Passwordless.html +++ b/docs/Passwordless.html @@ -3,7 +3,7 @@ JSDoc: Class: Passwordless - +