This release introduces support for "Sign in with Apple", several enhancements to streamline Hanko Elements frontend integration, as well as some minor improvements and fixes.

Sign in with Apple

Sign in with Apple is now supported as 3rd-party identity provider option.

Hanko Elements Improvements

All frontend functionalities are now accessible through the hanko-elements package, eliminating the need for a separate installation of the frontend-sdk package. Additionally, a new event system has been introduced, enabling developers to dynamically respond to certain events. For instance, you can now handle events such as session creation, session expiration, and auth flow completion to control user flows, manage JWTs, and more.

• Please take a look at the updated readme for a list of the new events and their descriptions.
• A new web component <hanko-events> has been added that doesn't contain any UI elements, but can make integration with the new event features simpler in some cases.
• All example apps under frontend/examples have been updated to demonstrate how to integrate the new functionality with certain frontend frameworks.

‍

Full Changelog: backend/v0.6.0...backend/v0.7.0

All Hanko Cloud projects will be automatically updated to the latest Hanko version.

Check out Hanko on GitHub and npm

We've updated Hanko Cloud with the following changes:

• 3rd-party identity providers. Sign in with Google and GitHub can now be enabled for all Hanko Cloud projects.
• Several UI fixes and improvements

‍

Check out the new features by signing in to your Hanko Cloud account.

For this release, we focused on making smaller improvements and fixing things. The highlights are:

• Added support for 3rd-party identity providers in cross-domain setups
• Added endpoints and UI for self-service account deletion
• Config simplified with regards to CORS

‍

‍Full Changelog: backend/v0.5.0...backend/v0.6.0

All Hanko Cloud projects will be automatically updated to v0.6.0 later this week.

Check out Hanko on GitHub and npm

Today, we've updated Hanko Cloud with the following changes:

• Team invitations and management [Pro feature]. Invite team members to your Hanko Cloud organization to work together on integrating Hanko with your app or for customer support
• New project dashboard. We've completely redesigned the project dashboard – for a better overview of your active users with an adjustable time period, find the integration guide for your tech stack, and see more useful information about the project
• Several layout fixes and improvements

‍

Check out the new features by signing in to your Hanko Cloud account.

3rd-party identity providers (OAuth SSO)

The leading feature of this release is support for 3rd-party identity providers, starting with Google and GitHub. Coming up next, Sign in with Apple is already in the making, and support for Microsoft accounts will follow shortly after. We've built the OAuth components in a modular way so that support for even more identity providers (e.g. Twitter, Facebook, Slack) can be added quickly by us or external contributors if there's demand for it.

During the first months of working on Hanko, we focused our efforts towards establishing a fully usable, production-ready authentication stack that is built for passkeys. With this now in place, we're able to combine the new and exciting passkey login flows with today's most popular authentication methods, i.e., "social logins".

Even with passkeys now broadly supported on all ecosystems, we think that offering sign up and login options for popular 3rd-party identity providers still makes sense, especially to convert new users quickly by allowing them to skip the "enter your email" and email verification steps. After a successful sign in with e.g. Google, users will be presented with the option to create a passkey for the app where Hanko is integrated, which can then be used for subsequent logins that no longer need to (but still can) be done through the 3rd-party.

Updated example apps

We've updated the example apps to use the latest hanko-elements version and added the hanko-profile element to each example.

Logout function in frontend SDK

Thanks to @irby, we now have support for the logout flow in hanko-frontend-sdk, making Hanko's integration even simpler.

‍

Full Changelog: v0.4.0...backend/v0.5.0

All Hanko Cloud projects have been updated to v0.5.0.

Check out Hanko on GitHub and npm

We've updated Hanko Cloud with the following changes:

• User details. Individual users on the users table can now be accessed and admins can see the user's data, passkeys, events, and delete the user
• Small UI fixes and improvements

‍

Check out the new features by signing in to your Hanko Cloud account.

The following new features are now available for Hanko Cloud admins:

• Profile. The new Hanko profile component that allows users to manage their email addresses and passkeys has made its way into Hanko Cloud and can be found in the top-right menu right above logout
• Search users and events. We've added search functionality to users and events, allowing admins to look for specific entries in both tables and filter events by specific event types
• Event details. More event details like the user's IP address or the user agent string can now be accessed by using the "extend" button on an event
• Custom SMTP. Admins can now configure their own SMTP server for passcode emails
• Resume project. Free projects are suspended after 7 days of inactivity to limit hosting costs so we added a "Resume" button that allows Hanko Cloud admins to continue using the free project

‍

Check out the new features by signing in to your Hanko Cloud account.

This release introduces the new Hanko profile custom element and basic rate limiting.

Profile element

In addition to <hanko-auth>, hanko-elements now also contains <hanko-profile>, a profile page that can be integrated into your app and fully customized with CSS. The profile supports email and credential management, allowing your users to change their email address, their password (if enabled), and manage their passkeys.

You can check out the new <hanko-profile> on example.hanko.io. We'd love to hear your thoughts.

Note: The import path for the elements package has been changed. See elements readme for more information. To use <hanko-profile>, you need the latest version of the hanko-elements (v0.1.1-alpha) and Hanko backend v0.4.0.

Rate limiting

This version also introduces basic rate limiting to Hanko to protect endpoints from scripted / DoS attacks. The rate limiter supports both in-memory and Redis configurations and uses a combination of user ID and IP address. (See docs).

WebAuthn credentials API

Hanko backend API now has endpoints to manage passkeys. Used by the new profile element, the new credentials API allows you to get a list of the user's passkeys, and individually rename and delete passkeys. (See docs).

Users & events search

Search endpoints are now available for users and events, preceding the upcoming release of the corresponding search features in Hanko Cloud. (See docs).

‍

‍Full Changelog: v0.3.2...v0.4.0

All Hanko Cloud projects have been updated to v0.4.0 on Feb 3, 2023.

Check out Hanko on GitHub and npm

Adding support for native Android and iOS apps and bringing Hanko to Svelte.

Mobile app support

Developers can now use Hanko for authentication when building native apps for Android and iOS. Since passkeys can also be used in native apps, this enables a seamless user experiences across websites and native apps.

To make this work, we had to add support for multiple WebAuthn origins to Hanko backend. Passkeys are always bound to an "origin", and in most cases that is a domain. However, unlike websites and iOS apps, an Android app identifies itself with its APK hash during the WebAuthn ceremonies required to use passkeys. This APK hash can now be added to the list of allowed origins in the Hanko backend config.

We will also release a first draft of a sample app for Android very soon to provide guidance on building native app authentication with passkeys using Hanko.

Bringing passkeys to Svelte 👋

A small bug in the library we're using for our web components prevented Hanko to work with Svelte apps. Until now. The integration guide can be found at https://docs.hanko.io/guides/svelte.

‍

‍Full Changelog: v0.3.1...v0.3.2

The main feature of this release is the support for hardware security keys on passkey creation.

FIDO security keys (and other roaming authenticators)

Until now, we allowed passkeys to be created only on platform authenticators (Touch ID, Face ID, Windows Hello..., i.e., the device you're browsing on) to keep things simple. Roaming authenticators, most commonly known as security keys, were not supported by Hanko so far. But with this release, we removed all restrictions regarding the authenticator types. It is perfectly fine to store a passkey on a physical security key, and now you can do that with Hanko.

One thing to be aware of is that most security keys only support storing a limited number of passkeys that can be as low as 25 in some cases.

This change also improves the passkey creation UI in Chromium browsers where it's now possible to store the passkey on your phone through the QR code flow – which was only working in Safari before.

Multi-platform support

Thanks to @hilli our docker builds now support other platforms than X86, namely AMD64 and ARM64. That's awesome!

New contributors

• @hilli made their first contribution in #416

‍

‍Full Changelog: v0.3.0...v0.3.1