megachangelog
Fix4.17.1

v4.17.1 Bug Fixes

This release fixes multiple security and authentication issues: blocks Login V2 auth for deactivated organizations, enforces permission checks for passkey enrollment, prevents unwanted OTP requests, and requires MFA prompt before 2FA enrollment.

4.17.1 (2026-08-14)

Bug Fixes

  • block Login V2 auth for users in deactivated organizations (a9311b8)
  • command: enforce permission check when issuing passkey enrollment codes (76dd58e)
  • login: prevent the browser from requesting OTP codes via returnCode (5f75afb)
  • login: require MFA prompt step before 2FA enrollment (db42371)
securityauthmfaloginbugfix

Source: original entry ↗