Repository Issue Activity (beta)

#2877 Login and registration return 500 when the User-Agent exceeds 255 characters

#2870 Support wildcard in Allowed Origins

#2869 Microsoft Connection fails when connecting an account with the same email as an existing Google account

#2868 hanko-auth: stale <cookieName>_session_state in localStorage restarts the login flow mid-passcode when the window regains focus

#2867 hanko-auth: user permanently stuck on passkey onboarding when navigator.credentials.create() never settles (Skip button unusable)

#2631 Add webhook events for session creation and deletion

#2490 Potential improvements to the repository's license file content

#2805 GitHub Social Auth forwards to /undefined

#2290 Expose TypeScript types

#2863 Android passkey registration fails with GMS [50152] RP ID cannot be validated; residentKey/requireResidentKey not configurable

#2265 Wrong error message (webauthn_credential_already_exists) when canceling registration of passkey

#2784 Password visibility toggle ("show password" eye icon) in hanko-elements password inputs

#2722 `connect_thirdparty_oauth_provider` does not link OAuth identity

#2643 Upgrade invopop/jsonschema to v0.14.0 (switch from wk8/go-ordered-map to pb33f/ordered-map)

#2502 Spellcheck should be disabled for login form inputs

#2471 Safari: Login flow never completes - session cookie never set

#2487 If no flow state (e.g. some error states), user gets no reload button

#2472 500 on login when account is not registered

#2338 500 response during social login (google)

#2399 AWS KMS adapter uses context.TODO() instead of proper context propagation

#2394 The email.send webhook is not being triggered when sending security notifications emails

#2406 Responsible Disclosure Inquiry – Security Vulnerability Found

#2398 Incorrect HTTP status code for expired passcode (408 instead of 400/422)

#2355 Webhooks update does not persist events

#1030 Email security notifications