CHANGELOG.md in webauthn-1.18.0 vs CHANGELOG.md in webauthn-2.0.0.beta1
- old
+ new
@@ -1,7 +1,58 @@
# Changelog
+## [v2.0.0.beta1] - 2019-09-16
+
+### Added
+
+- Smarter new public API methods:
+ - `WebAuthn.generate_user_id`
+ - `WebAuthn::Credential.options_for_create`
+ - `WebAuthn::Credential.options_for_get`
+ - `WebAuthn::Credential.from_create`
+ - `WebAuthn::Credential.from_get`
+ - All the above automatically handle encoding/decoding for necessary values. The specific encoding scheme can
+ be set (or even turned off) in `WebAutnn.configuration.encoding=`. Defaults to `:base64url`.
+- `WebAuthn::FakeClient#get` better fakes a real client by including `userHandle` in the returned hash.
+- Expose AAGUID and attestationCertificateKey for MDS lookup during attestation (@bdwater)
+
+### Changed
+
+- `WebAuthn::AuthenticatorAssertionResponse#verify` no longer accepts `allowed_credentials:` keyword argument.
+Please replace with `public_key:` and `sign_count:` keyword arguments. If you're not performing sign count
+verification, signal opt-out with `sign_count: false`.
+
+- `WebAuthn::FakeClient#create` and `WebAuthn::FakeClient#get` better fakes a real client by using camelBack string
+keys instead of snake_case symbol keys in the returned hash.
+- `WebAuthn::FakeClient#create` and `WebAuthn::FakeClient#get` better fakes a real client by not padding the
+returned base64url-encoded `id` value.
+
+### Deprecated
+
+- `WebAuthn.credential_creation_options` method. Please consider using `WebAuthn::Credential.options_for_create`.
+- `WebAuthn.credential_request_options` method. Please consider using `WebAuthn::Credential.options_for_get`.
+
+### Removed
+
+- `WebAuthn::AuthenticatorAssertionResponse.new` no longer accepts `credential_id`. No replacement needed, just don't
+pass it.
+
+### BREAKING CHANGES
+
+- `WebAuthn::AuthenticatorAssertionResponse.new` no longer accepts `credential_id`. No replacement needed, just don't
+pass it.
+
+- `WebAuthn::AuthenticatorAssertionResponse#verify` no longer accepts `allowed_credentials:` keyword argument.
+Please replace with `public_key:` and `sign_count:` keyword arguments. If you're not performing sign count
+verification, signal opt-out with `sign_count: false`.
+
+- `WebAuthn::FakeClient#create` and `WebAuthn::FakeClient#get` better fakes a real client by using camelBack string
+keys instead of snake_case symbol keys in the returned hash.
+
+- `WebAuthn::FakeClient#create` and `WebAuthn::FakeClient#get` better fakes a real client by not padding the
+returned base64url-encoded `id` value.
+
## [v1.18.0] - 2019-07-27
### Added
- Ability to migrate U2F credentials to WebAuthn ([#211](https://github.com/cedarcode/webauthn-ruby/pull/211)) (@bdewater + @jdongelmans)
@@ -207,9 +258,10 @@
- _Registration_ ceremony:
- `WebAuthn.credential_creation_options` returns default options for you to initiate the _Registration_
- `WebAuthn::AuthenticatorAttestationResponse.valid?` can be used to validate fido-u2f attestations returned by the browser
- Works with ruby 2.5
+[v2.0.0.beta1]: https://github.com/cedarcode/webauthn-ruby/compare/v1.18.0...v2.0.0.beta1/
[v1.18.0]: https://github.com/cedarcode/webauthn-ruby/compare/v1.17.0...v1.18.0/
[v1.17.0]: https://github.com/cedarcode/webauthn-ruby/compare/v1.16.0...v1.17.0/
[v1.16.0]: https://github.com/cedarcode/webauthn-ruby/compare/v1.15.0...v1.16.0/
[v1.15.0]: https://github.com/cedarcode/webauthn-ruby/compare/v1.14.0...v1.15.0/
[v1.14.0]: https://github.com/cedarcode/webauthn-ruby/compare/v1.13.0...v1.14.0/