@rocket.chat/desktop-api 1.2.0-rc.0 → 1.3.0-rc.0

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @rocket.chat/desktop-api
 
+## 1.3.0-rc.0
+
+### Minor Changes
+
+- ([#41056](https://github.com/RocketChat/Rocket.Chat/pull/41056)) Added a `setUserRoles` bridge method to the desktop API and pushed the logged-in user's roles to the desktop app. This lets the desktop client restrict supportedVersions messages (such as version-expiration warnings) to specific roles like admins, instead of showing them to every user. The push is reactive to role changes; desktop builds without the bridge method fall back to their own role lookup.
+
+- ([#40721](https://github.com/RocketChat/Rocket.Chat/pull/40721)) ## Phishing-Resistant Multi-Factor Authentication
+
+  Introduces a more secure and reliable server-side OAuth authentication flow.
+
+  ### What’s New
+
+  - **Improved OAuth login security**
+    OAuth authentication now happens fully on the server, reducing the risk of token theft, phishing attacks, and client-side credential interception.
+  - **Built-in CSRF, state validation, and PKCE protection**
+    OAuth logins now include stronger protection against CSRF attacks, request tampering, and authorization code interception through secure state validation and PKCE support.
+  - **Improved two-step verification with OAuth logins**
+    Users with email or TOTP two-factor authentication enabled will now be asked to complete 2FA even when signing in with providers like Google, GitHub, GitLab, and others.
+  - **Improved mobile & desktop app login**
+    Mobile and desktop apps now support a smoother and more secure deep-link OAuth login flow.
+
+## 1.2.0
+
 ## 1.2.0-rc.0
 
 ### Minor Changes

package/dist/index.d.ts

@@ -32,6 +32,7 @@ export interface IRocketChatDesktop {
     setSidebarCustomTheme: (customTheme: string) => void;
     setTitle: (title: string) => void;
     setUserLoggedIn: (userLoggedIn: boolean) => void;
+    setUserRoles: (roles: string[]) => void;
     setUserPresenceDetection: (options: {
         isAutoAwayEnabled: boolean;
         idleThreshold: number | null;
@@ -58,5 +59,6 @@ export interface IRocketChatDesktop {
     setUserToken: (token: string, userId: string) => void;
     openDocumentViewer: (url: string, format: string, options: any) => void;
     reloadServer: () => void;
+    getE2ePdfPreviewSizeLimit: () => number;
     openInBrowser: (url: string) => void;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://www.schemastore.org/package",
   "name": "@rocket.chat/desktop-api",
-  "version": "1.2.0-rc.0",
+  "version": "1.3.0-rc.0",
   "type": "module",
   "exports": {
     ".": {

package/src/index.ts

@@ -38,6 +38,7 @@ export interface IRocketChatDesktop {
 	setSidebarCustomTheme: (customTheme: string) => void;
 	setTitle: (title: string) => void;
 	setUserLoggedIn: (userLoggedIn: boolean) => void;
+	setUserRoles: (roles: string[]) => void;
 	setUserPresenceDetection: (options: {
 		isAutoAwayEnabled: boolean;
 		idleThreshold: number | null;
@@ -63,5 +64,6 @@ export interface IRocketChatDesktop {
 	setUserToken: (token: string, userId: string) => void;
 	openDocumentViewer: (url: string, format: string, options: any) => void;
 	reloadServer: () => void;
+	getE2ePdfPreviewSizeLimit: () => number;
 	openInBrowser: (url: string) => void;
 }