v1.13.5

Changed

• Add and use constants for session flashes by @dwightwatson in #409
• Use current_password rule when changing password by @dwightwatson in #410
• Parameters order with hash_equals by @chivincent in #411

v1.13.4

Fixed

• Only save user if need to by @taylorotwell in 9a68cf2

v1.13.3

Changed

• Return recovery errors under the recovery_code key by @jessarcher in #401

v1.13.2

Fixed

• Fix second usage of 2FA code by @xwillq in #399

v1.13.1

Fixed

• Call FailedTwoFactorLoginResponse::toResponse with TwoFactorLoginRequest by @ricklambrechts in #395

v1.13.0

Added

• Added config option for custom OTP window by @robtesch in #385

v1.12.0

Changed

• 2FA setup key by @ps-sean in #371
• Enable 2FA confirmation by default by @taylorotwell in a6caadc

Fixed

• Fix double error message for failed 2FA response by @driesvints in #369

v1.11.2

Fixed

• Ensures route password.confirm is defined when not using views by @Frozire in #368

Security

• Cache 2FA token timestamp by @driesvints in #366

v1.11.1

Fixed

• Fix Exception when sending empty 2FA confirmation code by @SrDante in #361
• Unsupported operand types on rollback migration by @Jackpump in #362

v1.11.0

Changed

• Include the otpauth url when retrieving the QR svg by @JanMisker in #356
• Confirmable 2FA by @taylorotwell in #358

Fixed

• Fix incorrect key for error bag by @vaibhavpandeyvpz in #360