upstream/upstream-rocketchat
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
develop
upstream-rocketchat/packages/desktop-api/CHANGELOG.md
upstream-mirror 30810eecd7
Some checks failed
Create issues from TODOs / todos (push) Failing after 3s
Details
Close inactive issues / close-issues (push) Has been cancelled
Details
Deploy GitHub Pages / deploy-preview (push) Has been cancelled
Details
CI / ⚙️ Variables Setup (push) Has been cancelled
Details
CI / ⚙️ Test Guard (push) Has been cancelled
Details
CI / 🚀 Notify external services - draft (push) Has been cancelled
Details
CI / 📦 Build Packages (push) Has been cancelled
Details
CI / 📦 Meteor Build (coverage) (push) Has been cancelled
Details
CI / 📦 Meteor Build (production) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [account-service presence-service omnichannel-transcript-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [account-service presence-service omnichannel-transcript-service], fips) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [authorization-service queue-worker-service ddp-streamer-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [authorization-service queue-worker-service ddp-streamer-service], fips) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [rocketchat], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [rocketchat], coverage) (push) Has been cancelled
Details
CI / 🚢 Build Docker (amd64, [rocketchat], fips) (push) Has been cancelled
Details
CI / 🚢 Build Docker (arm64, [account-service presence-service omnichannel-transcript-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
Details
CI / 🚢 Build Docker (arm64, [authorization-service queue-worker-service ddp-streamer-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
Details
CI / 🚢 Build Docker (arm64, [rocketchat], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
Details
CI / 🚢 Build Docker (arm64, [rocketchat], coverage) (push) Has been cancelled
Details
CI / 🚢 Publish Docker Images (ghcr.io) (push) Has been cancelled
Details
CI / 📦 Track Image Sizes (push) Has been cancelled
Details
CI / 🔎 Code Check - Action Lint (push) Has been cancelled
Details
CI / 🔎 Code Check (push) Has been cancelled
Details
CI / 🔨 Test Storybook (push) Has been cancelled
Details
CI / 🔨 Test Unit (push) Has been cancelled
Details
CI / 🔨 Test API (CE) (push) Has been cancelled
Details
CI / 🔨 Test API Livechat (CE) (push) Has been cancelled
Details
CI / 🔨 Test UI (CE) (push) Has been cancelled
Details
CI / 🔨 Test API (EE) (push) Has been cancelled
Details
CI / 🔨 Test API Livechat (EE) (push) Has been cancelled
Details
CI / 🔨 Test API Apps (deno-runtime - EE) (push) Has been cancelled
Details
CI / 🔨 Test UI (EE) (push) Has been cancelled
Details
CI / 🔨 Test API (FIPS) (push) Has been cancelled
Details
CI / 🔨 Test API Livechat (FIPS) (push) Has been cancelled
Details
CI / 🔨 Test UI (FIPS) (push) Has been cancelled
Details
CI / 🔨 Test Federation Matrix (push) Has been cancelled
Details
CI / 📊 Report Coverage (push) Has been cancelled
Details
CI / ✅ Tests Done (push) Has been cancelled
Details
CI / 🚀 Publish build assets (push) Has been cancelled
Details
CI / 🚀 Publish Docker Images (DockerHub) (push) Has been cancelled
Details
CI / 🚀 Notify external services (push) Has been cancelled
Details
CI / Update Version Durability (push) Has been cancelled
Details
Release / Release (push) Has been cancelled
Details
Auto-close duplicate issues / auto-close-duplicates (push) Failing after 1s
Details
Code scanning - action / CodeQL-Build (push) Failing after 2s
Details
snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)
2026-09-16 01:21:02 +05:00

105 lines
5.3 KiB
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# @rocket.chat/desktop-api
## 1.3.0
### Minor Changes
- ([#40721](https://github.com/RocketChat/Rocket.Chat/pull/40721)) ## Phishing-Resistant Multi-Factor Authentication
Introduces a more secure and reliable server-side OAuth authentication flow.
### What’s New
- **Improved OAuth login security**
OAuth authentication now happens fully on the server, reducing the risk of token theft, phishing attacks, and client-side credential interception.
- **Built-in CSRF, state validation, and PKCE protection**
OAuth logins now include stronger protection against CSRF attacks, request tampering, and authorization code interception through secure state validation and PKCE support.
- **Improved two-step verification with OAuth logins**
Users with email or TOTP two-factor authentication enabled will now be asked to complete 2FA even when signing in with providers like Google, GitHub, GitLab, and others.
- **Improved mobile & desktop app login**
Mobile and desktop apps now support a smoother and more secure deep-link OAuth login flow.
- **A new setting to enable/disable new OAuth Flow**
Enable this new setting `Accounts_OAuth_Use_Modern_Flow` to use all of the above mentioned features.
- ([#41056](https://github.com/RocketChat/Rocket.Chat/pull/41056)) Added a `setUserRoles` bridge method to the desktop API and pushed the logged-in user's roles to the desktop app. This lets the desktop client restrict supportedVersions messages (such as version-expiration warnings) to specific roles like admins, instead of showing them to every user. The push is reactive to role changes; desktop builds without the bridge method fall back to their own role lookup.
## 1.3.0-rc.0
### Minor Changes
- ([#40721](https://github.com/RocketChat/Rocket.Chat/pull/40721)) ## Phishing-Resistant Multi-Factor Authentication
Introduces a more secure and reliable server-side OAuth authentication flow.
### What’s New
- **Improved OAuth login security**
OAuth authentication now happens fully on the server, reducing the risk of token theft, phishing attacks, and client-side credential interception.
- **Built-in CSRF, state validation, and PKCE protection**
OAuth logins now include stronger protection against CSRF attacks, request tampering, and authorization code interception through secure state validation and PKCE support.
- **Improved two-step verification with OAuth logins**
Users with email or TOTP two-factor authentication enabled will now be asked to complete 2FA even when signing in with providers like Google, GitHub, GitLab, and others.
- **Improved mobile & desktop app login**
Mobile and desktop apps now support a smoother and more secure deep-link OAuth login flow.
- **A new setting to enable/disable new OAuth Flow**
Enable this new setting `Accounts_OAuth_Use_Modern_Flow` to use all of the above mentioned features.
- ([#41056](https://github.com/RocketChat/Rocket.Chat/pull/41056)) Added a `setUserRoles` bridge method to the desktop API and pushed the logged-in user's roles to the desktop app. This lets the desktop client restrict supportedVersions messages (such as version-expiration warnings) to specific roles like admins, instead of showing them to every user. The push is reactive to role changes; desktop builds without the bridge method fall back to their own role lookup.
## 1.2.0
## 1.2.0-rc.0
### Minor Changes
- ([#39760](https://github.com/RocketChat/Rocket.Chat/pull/39760)) ## Phishing-Resistant Multi-Factor Authentication
Introduces a more secure and reliable server-side OAuth authentication flow.
### What’s New
- **Improved OAuth login security**
OAuth authentication now happens fully on the server, reducing the risk of token theft, phishing attacks, and client-side credential interception.
- **Built-in CSRF, state validation, and PKCE protection**
OAuth logins now include stronger protection against CSRF attacks, request tampering, and authorization code interception through secure state validation and PKCE support.
- **Improved two-step verification with OAuth logins**
Users with email or TOTP two-factor authentication enabled will now be asked to complete 2FA even when signing in with providers like Google, GitHub, GitLab, and others.
- **Improved mobile & desktop app login**
Mobile and desktop apps now support a smoother and more secure deep-link OAuth login flow.
## 1.1.1
### Patch Changes
- ([#38989](https://github.com/RocketChat/Rocket.Chat/pull/38989)) chore(eslint): Upgrades ESLint and its configuration
## 1.1.1-rc.0
### Patch Changes
- ([#38989](https://github.com/RocketChat/Rocket.Chat/pull/38989)) chore(eslint): Upgrades ESLint and its configuration
## 1.1.0
### Minor Changes
- ([#36912](https://github.com/RocketChat/Rocket.Chat/pull/36912)) Defines `reloadServer()` method for the context bridge object type.
## 1.1.0-rc.0
### Minor Changes
- ([#36912](https://github.com/RocketChat/Rocket.Chat/pull/36912)) Defines `reloadServer()` method for the context bridge object type.
## 1.0.0
### Major Changes
- ([#36770](https://github.com/RocketChat/Rocket.Chat/pull/36770)) Adds a new package (`@rocket.chat/desktop-api`) to interface the desktop app's injected context
## 1.0.0-rc.0
### Major Changes
- ([#36770](https://github.com/RocketChat/Rocket.Chat/pull/36770)) Adds a new package (`@rocket.chat/desktop-api`) to interface the desktop app's injected context
Reference in New Issue View Git Blame Copy Permalink