v1.12.0

Changed

• 2FA setup key by @ps-sean in #371
• Enable 2FA confirmation by default by @taylorotwell in a6caadc

Fixed

• Fix double error message for failed 2FA response by @driesvints in #369

v1.11.2

Fixed

• Ensures route password.confirm is defined when not using views by @Frozire in #368

Security

• Cache 2FA token timestamp by @driesvints in #366

v1.11.1

Fixed

• Fix Exception when sending empty 2FA confirmation code by @SrDante in #361
• Unsupported operand types on rollback migration by @Jackpump in #362

v1.11.0

Changed

• Include the otpauth url when retrieving the QR svg by @JanMisker in #356
• Confirmable 2FA by @taylorotwell in #358

Fixed

• Fix incorrect key for error bag by @vaibhavpandeyvpz in #360

v1.10.2

Changed

• Prevent new login after 2FA challenge (#353)

Security

• Fix throttle bypass exploit (#354)

v1.10.1

Changed

• Fix VerifyEmailResponse resolving (#349)

v1.10.0

Added

• Add VerifyEmailResponse contract (#347)

Changed

• Switch to anonymous migrations (#348)

v1.9.0

Changed

• Add 2fa Events (#338)
• Laravel 9 support (#340)

v1.8.6

Changed

• Customise the auth middleware name (#335)

Fixed

• Check if authenticated user has 2FA enabled (#334)

v1.8.5

Fixed

• Fix an issue with array to string conversion (#333)