chore: release v0.3.2

[github-actions]

🤖 New release

• rustauth-oauth: 0.3.1 -> 0.3.2
• rustauth-social-providers: 0.3.1 -> 0.3.2
• rustauth-core: 0.3.1 -> 0.3.2
• rustauth-tokio-postgres: 0.3.1 -> 0.3.2
• rustauth-deadpool-postgres: 0.3.1 -> 0.3.2
• rustauth-diesel: 0.3.1 -> 0.3.2
• rustauth-fred: 0.3.0 -> 0.3.2
• rustauth-i18n: 0.3.1 -> 0.3.2
• rustauth-plugins: 0.3.0 -> 0.3.2
• rustauth-oauth-provider: 0.3.0 -> 0.3.2
• rustauth-oidc: 0.3.1 -> 0.3.2
• rustauth-passkey: 0.3.0 -> 0.3.2
• rustauth-redis: 0.3.1 -> 0.3.2
• rustauth-saml: 0.3.0 -> 0.3.2
• rustauth-scim: 0.3.0 -> 0.3.2
• rustauth-sqlx: 0.3.1 -> 0.3.2
• rustauth-sso: 0.3.0 -> 0.3.2
• rustauth-stripe: 0.3.0 -> 0.3.2
• rustauth-telemetry: 0.3.1 -> 0.3.2
• rustauth: 0.3.0 -> 0.3.2
• rustauth-actix-web: 0.3.1 -> 0.3.2
• rustauth-axum: 0.3.1 -> 0.3.2
• rustauth-cli: 0.3.1 -> 0.3.2

Changelog

rustauth-oauth

0.2.0 - 2026-06-14

Initial public working release.

Added

• OAuth2Client with authorization-code, refresh, client-credentials, and device flows.
• PKCE, guarded outbound HTTP (blocks private/loopback IPs by default), and JWT/JWKS verification helpers.
• ClientSecret and flow builder APIs for social and generic OAuth integrations.

rustauth-social-providers

0.2.0 - 2026-06-14

Initial public working release.

Added

• Built-in social OAuth providers (GitHub, Google, Discord, Slack, Apple, and more).
• SocialProviderConfig, SocialProviderConfigBuilder, ProviderId, and ProviderIdentity.
• providers::* for app setup and advanced::* for low-level OAuth types.

rustauth-core

0.3.2 - 2026-07-26

Fixed

• (ci) restore failing checks (#208)

rustauth-tokio-postgres

0.2.0 - 2026-06-14

Initial public working release.

Added

• Minimal tokio-postgres database adapter for apps that own a Client.
• Bundled TokioPostgresStores and migration planning for Postgres.

rustauth-deadpool-postgres

0.2.0 - 2026-06-14

Initial public working release.

Added

• Pooled Postgres adapter via deadpool-postgres (recommended for production).
• Bundled DeadpoolPostgresStores and shared migration planning with rustauth-tokio-postgres.

rustauth-diesel

0.3.0 - 2026-06-15

Added

• Production Postgres DbAdapter (diesel-postgres) with full CRUD, joins,
  transactions, schema migrations, plugin migrations, and SQL-backed rate limits.
• Production MySQL DbAdapter (diesel-mysql) with full CRUD, joins,
  transactions, schema migrations, plugin migrations, and SQL-backed rate limits.
• DieselPostgresStores / DieselPostgresStoresBuilder bundle.
• DieselMysqlStores / DieselMysqlStoresBuilder bundle.
• Dynamic DieselPostgresRow and DieselMysqlRow (QueryableByName) for shared SQL runner integration.
• Port of rustauth-sqlx Postgres and MySQL adapter integration tests.

rustauth-fred

0.3.2 - 2026-07-26

Changed

• release v0.3.1 (#175)

Fixed

• break plugins/fred dev-dep cycle and repair post-0.3.0 CI
• repair release preflight (#207)

rustauth-i18n

0.2.0 - 2026-06-14

Initial public working release.

Added

• Internationalization plugin with I18nOptions, locale resolution, and async get_locale callbacks.
• Localized auth error and response shaping for AuthRouter::handle_async.

rustauth-plugins

0.3.2 - 2026-07-26

Changed

• [codex] Add verified Generic OIDC profile extraction (#186)
• release v0.3.1 (#175)

Fixed

• break plugins/fred dev-dep cycle and repair post-0.3.0 CI
• (plugins) restrict email OTP verification endpoints
• (plugins) reject unverified generic oauth id tokens (#179)
• fix generic oauth fail-closed http client (#180)
• fix phone otp storage (#182)
• reject protected admin user updates (#185)
• (organization) authorize invitation team assignment
• (organization) authorize add-member team assignment
• (admin) reject reserved create-user data fields (#199)
• (phone-number) require password before sign-in OTP (#202)

rustauth-oauth-provider

0.3.2 - 2026-07-26

Changed

• release v0.3.1 (#175)
• [codex] Preserve offline refresh-token semantics (#205)

Fixed

• fix oauth client reference id update (#181)
• (oauth) enforce skip-consent boundary
• (oauth) prevent public client downgrade
• (oauth) bind introspection and revocation to clients

rustauth-oidc

0.2.0 - 2026-06-14

Initial public working release.

Added

• OIDC relying-party helpers for external enterprise IdPs (Okta, Entra ID, Auth0, Keycloak, …).
• Discovery document validation, token endpoint authentication selection, and ID token verification.

rustauth-passkey

0.3.2 - 2026-07-26

Changed

• release v0.3.1 (#175)

Fixed

• (passkey) bind verification to challenge config

rustauth-redis

0.2.0 - 2026-06-14

Initial public working release.

Added

• Redis/Valkey rate-limit and secondary storage via redis-rs.
• TLS support behind optional rustls and native-tls features.
• Atomic GETDEL for secondary-storage take operations.

rustauth-saml

0.3.2 - 2026-07-26

Changed

• release v0.3.1 (#175)

Fixed

• (sso) cap SAML SLO message inflation (#184)
• (ci) restore failing checks (#208)

rustauth-scim

0.3.2 - 2026-07-26

Changed

• release v0.3.1 (#175)

Fixed

• fix scim filter complexity limits (#177)
• (scim) deny empty required role allow-list

rustauth-sqlx

0.2.0 - 2026-06-14

Initial public working release.

Added

• SQLx-backed adapters for SQLite, Postgres, and MySQL.
• Bundled SqlxStores and apply_to_options for recommended app wiring.
• SQL-backed standalone rate-limit store and dialect-specific migration planning.
• Feature flags per dialect (sqlite, postgres, mysql); default = [].

rustauth-sso

0.3.2 - 2026-07-26

Changed

• Harden SSO provider trust (#183)
• release v0.3.1 (#175)

Fixed

• fail closed when OIDC HTTP client build fails (#176)
• (sso) cap SAML SLO message inflation (#184)
• (sso) harden saml acs idp-initiated responses
• (sso) require org admin for provider registration (#196)
• (sso) enforce saml assertion signature policy (#200)
• (sso) require signed SAML SLO logout requests (#201)
• (sso) prevent provider update org reassignment (#198)
• (ci) restore failing checks (#208)

rustauth-stripe

0.3.2 - 2026-07-26

Changed

• release v0.3.1 (#175)

Fixed

• (stripe) validate success redirect

rustauth-telemetry

0.2.0 - 2026-06-14

Initial public working release.

Added

• Optional anonymous telemetry: get_telemetry_auth_config, TelemetryPublisher, and CLI event payloads.
• Redacted config snapshots and opt-in RUSTAUTH_TELEMETRY environment controls.
• Feature-gated HTTP transport (http feature).

rustauth

0.3.2 - 2026-07-26

Changed

• Harden SSO provider trust (#183)
• [codex] Add verified Generic OIDC profile extraction (#186)
• [codex] Preserve offline refresh-token semantics (#205)
• release v0.3.1 (#175)
• update Cargo.lock dependencies
• (release) add release-plz automation

Fixed

• (stripe) validate success redirect
• fail closed when OIDC HTTP client build fails (#176)
• (sso) harden saml acs idp-initiated responses
• (sso) require org admin for provider registration (#196)
• (sso) enforce saml assertion signature policy (#200)
• (sso) require signed SAML SLO logout requests (#201)
• (sso) prevent provider update org reassignment (#198)
• fix scim filter complexity limits (#177)
• (scim) deny empty required role allow-list
• (sso) cap SAML SLO message inflation (#184)
• (plugins) restrict email OTP verification endpoints
• (plugins) reject unverified generic oauth id tokens (#179)
• fix generic oauth fail-closed http client (#180)
• fix phone otp storage (#182)
• reject protected admin user updates (#185)
• (organization) authorize invitation team assignment
• (organization) authorize add-member team assignment
• (admin) reject reserved create-user data fields (#199)
• (phone-number) require password before sign-in OTP (#202)
• (passkey) bind verification to challenge config
• fix oauth client reference id update (#181)
• (oauth) enforce skip-consent boundary
• (oauth) prevent public client downgrade
• (oauth) bind introspection and revocation to clients
• break plugins/fred dev-dep cycle and repair post-0.3.0 CI
• repair release preflight (#207)
• (ci) restore failing checks (#208)

rustauth-actix-web

0.3.0 - 2026-06-15

Added

• RustAuthActixWebExt for mounting auth routes into Actix Web (mount_at_base_path,
  mount_routes, handle).
• RustAuthActixWebOptions for per-mount configuration.
• Parity integration tests against the Axum adapter contract.

rustauth-axum

0.2.0 - 2026-06-14

Initial public working release.

Added

• RustAuthAxumExt for mounting auth routes into Axum (mount_at_base_path, into_router,
  into_routes, handle).
• RustAuthAxumOptions for per-mount configuration.

rustauth-cli

0.3.2 - 2026-07-26

Changed

• update Cargo.lock dependencies

---

This PR was generated with release-plz.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
rustauth-docs-site	Ignored		Jul 26, 2026 8:39pm

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: eedbcecbf0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Generate 0.3.2 notes only from post-0.3.1 changes

When this release is published, the root changelog is used for its GitHub release notes, but this header compares from v0.3.0 and the new section duplicates the full 0.3.1 security/fix list directly below it. This makes the published 0.3.2 notes falsely attribute already-released fixes to 0.3.2, so consumers cannot reliably determine which patch contains a given fix; base the section on v0.3.1 and retain only changes after the 0.3.1 release commit.

AGENTS.md reference: AGENTS.md:L124-L124

Useful? React with 👍 / 👎.