Rodauth 2.22.0 Released

[jeremyevans]

Rodauth 2.22.0 has been released!

New Features

• Rodauth now ignores parameters containing ASCII NUL bytes ("\0") by
  default. You can customize this behavior using the
  null_byte_parameter_value configuration method.

• A reset_password_notify feature has been added for emailing users
  after successful password resets.

• External features can now use the email method inside their
  feature definitions to DRY up the creation of email configuration
  methods. The email method will setup the following configuration
  methods for the feature:

  • ${name}_email_subject
  • ${name}_email_body
  • create_${name}_email
  • send_${name}_email

Other Improvements

• The active_sessions feature now correctly handles logouts for
  sessions that were created before the active_sessions feature was
  added to the Rodauth configuration.

• The change_password_notify feature now works correctly when using
  template precompilation.

• The update_sms method now updates the in-memory sms hash instead of
  the in-memory account hash. This only has an effect if you are
  using the sms_codes feature and customizing Rodauth to access one
  of these hashes after a call to update_sms.

Backwards Compatibility

• If your application requires the ability to submit values containing
  ASCII NUL bytes ("\0") as Rodauth parameters, you should use the
  new null_byte_parameter_value configuration method to pass the
  value through unchanged:

  null_byte_parameter_value do |_, v|
  v
  end

Thanks,
Jeremy