MBKTech logo BKAuthe
Release Notes

Changelog & Version History

Detailed record of new features, performance enhancements, security hardening, and breaking changes across all MBKAuthe releases.

v5.6.0 Latest Release
August 20, 2026

Added

  • Unified Dual-Database Architecture: Complete support for SQLite (better-sqlite3) alongside PostgreSQL with runtime SQL translation via translatePgToSqlite.
  • BaseRepository Class: Driver-agnostic base repository with transactional helpers (withTransaction) and dialect builders (postgresDialect, sqliteDialect).
  • RFC 8628 Browser-based CLI Device Flow: Staging table PendingToken, authorization verification links, and single-delivery token polling.
  • Dynamic Re-targeting with setDb(): Ability to switch database connections dynamically during runtime or testing.
  • Graceful Pool Shutdown & Connection Draining: Centralized registerGracefulShutdown and test teardown closeAllConnections.

Improved

  • SQLite FIFO promise mutex preventing write contention deadlocks in WAL mode.
  • Case-insensitive configuration resolution across flat env vars and JSON configurations.
v5.5.0
June 12, 2026

Added

  • Multi-Session Pruning: Configurable MAX_SESSIONS_PER_USER with automated eviction of oldest active sessions.
  • Strict Validation Helpers: Introduced strictValidateSession and strictValidateSessionAndRole for enforcing cookie-only authentication.
  • reloadSessionUser Helper: Seamlessly refreshes cached session user data from the database.
v5.0.0
March 15, 2026

Added

  • PBKDF2 Password Hashing: Migration to cryptographically strong Node.js PBKDF2 with unique salts.
  • GitHub App & Google OAuth: Social login support with unified account linking.
  • Dev-only DB Query Monitor: Visual execution profiling at /mbkauthe/db with callsites, pool metrics, and latency stats.
  • Two-Factor Authentication (TOTP): RFC 6238 implementation with trusted device cookies.