@camstack/addon-auth 1.2.169 → 1.2.171

package/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.171] - 2026-10-30
+
+### Changed
+
+- Editing, deleting or adding an OIDC connection no longer fails with a foreign secret marker error, and a connection without a client secret (public client) is accepted
+
+## [1.2.170] - 2026-10-27
+
+### Changed
+
+- Rebuilt against updated dependencies.
+
+## [1.2.169] - 2026-10-27
+
 ### Added
 
-- Package README and changelog, included in the published files list.
+- Authentication: Authentication bundle — OIDC and WebAuthn/passkey. Multi-entry npm package shipping 2 addons under a single bundle; each addon keeps its own id, capabilities, and runner.
+- Provides the addons OpenID Connect, Passkey.

package/README.md

@@ -1,22 +1,27 @@
-# @camstack/addon-auth
+# Authentication
 
-Authentication bundle — OIDC and WebAuthn/passkey. Multi-entry npm package shipping 2 addons under a single bundle; each addon keeps its own id, capabilities, and runner.
+Authentication bundle — OIDC and WebAuthn/passkey. Multi-entry npm package shipping 2 addons under a single bundle; each addon keeps its own id, capabilities, and runner. OIDC SSO and WebAuthn/passkey login providers.
 
-## What it does
+<!-- readme:generated:start (derived from the manifest; edit outside this block) -->
 
-- **OpenID Connect** (`auth-oidc`): Standards-compliant OIDC authentication. Configure issuer URL + client credentials to enable SSO via Google, Microsoft, Okta, Keycloak, etc. In-process on hub root — pure HTTP/JWT, no native deps.
-  - Node placement: `any-node`, runner group `auth`.
+Package `@camstack/addon-auth` on npm.
+
+## What it provides
+
+- **OpenID Connect** (`auth-oidc`): Standards-compliant OIDC authentication. Configure issuer URL + client credentials to enable SSO via Google, Microsoft, Okta, Keycloak, etc. In-process on hub root — pure HTTP/JWT, no native deps. Category: system.
   - Capabilities: `auth-provider`, `addon-routes`, `login-method`, `oidc-connections`.
-- **Passkey** (`auth-webauthn`): Phishing-resistant passwordless 2FA via the WebAuthn standard. Users enroll a passkey (Touch ID, Windows Hello, YubiKey, …) and authenticate with the browser's native prompt — no codes to type.
-  - Node placement: `any-node`, runner group `auth`.
+- **Passkey** (`auth-webauthn`): Phishing-resistant passwordless 2FA via the WebAuthn standard. Users enroll a passkey (Touch ID, Windows Hello, YubiKey, …) and authenticate with the browser's native prompt — no codes to type. Category: system.
   - Capabilities: `user-passkeys`, `addon-widgets-source`, `login-method`.
 
-## Settings
+## Requirements
 
-Settings this addon exposes are edited from System → Addons → this addon → Settings when they apply to the whole cluster, and from the device page when they belong to one device. A password field is stored in the keychain.
+- Placement: default placement (runner group `auth`).
+- A CamStack hub. An agent is used only where the placement above allows it.
 
-## Requirements
+## Documentation
+
+- [docs/architecture/authentication.md](https://github.com/camstack/server/blob/main/docs/architecture/authentication.md)
 
-- Peer packages already on the node: `@camstack/types`, `react`, `react-dom`.
-- A CamStack hub. An agent is used only when the placement above allows it.
+See [CHANGELOG.md](./CHANGELOG.md) for what changed in each version.
 
+<!-- readme:generated:end -->