• Handle unsupported key algorithmlatest1Docsa7c66f62025-09-30 20:28

  Change detail

  1 change across 1 operation

  AllBreakingWarningInfo

  • POST/api/key
    • info

      added the non-success response with the status 400

• Document admin forbidden responses in OpenAPI16Docs471d2f22025-09-30 19:44

  Change detail

  16 changes across 16 operations

  AllBreakingWarningInfo

  • DELETE/api/key/{uuid}
    • info

      added the non-success response with the status 403

  • POST/api/key
    • info

      added the non-success response with the status 403

  • GET/api/keys/algorithms
    • info

      added the non-success response with the status 403

  • GET/api/keys/metadata
    • info

      added the non-success response with the status 403

  • DELETE/api/oauth-client/{uuid}
    • info

      added the non-success response with the status 403

  • GET/api/oauth-client/{uuid}
    • info

      added the non-success response with the status 403

  • POST/api/oauth-client/{uuid}/primary-secret
    • info

      added the non-success response with the status 403

  View all changes (16)
• Normalize password inputs before hashing2Docsa05a2702025-09-30 18:50

  Change detail

  2 changes across 2 operations

  AllBreakingWarningInfo

  • PUT/api/user/{uuid}/password
    • info

      added the non-success response with the status 400

  • PUT/api/user/me/password
    • info

      added the non-success response with the status 400

• Normalize user emails and expose invalid email errors3Docsaa00ced2025-09-30 16:06

  Change detail

  3 changes across 3 operations

  AllBreakingWarningInfo

  • PUT/api/user/{uuid}
    • info

      added the non-success response with the status 400

  • POST/api/user/auth
    • info

      added the non-success response with the status 400

  • POST/api/user
    • info

      added the non-success response with the status 400

• Validate OAuth client identifiers and names2Docse6076052025-09-30 15:32

  Change detail

  2 changes across 2 operations

  AllBreakingWarningInfo

  • PUT/api/oauth-client/{uuid}
    • info

      added the non-success response with the status 400

  • POST/api/oauth-client
    • info

      added the non-success response with the status 400

• Update JWK schema for multiple key types333Docscd7636f2025-09-28 21:09
• Restore secret dialogs and fix OAuth client spec1881Docs31360522025-09-28 10:29
• Optional access token expiration for master auth token12Docsf7d6c142025-09-28 08:26
• Add OAuth refresh tokens and client access token TTL configuration13Docs87e1ba52025-09-27 07:37
• Superusers28Docsf4264f62025-09-26 21:55
• Implement logout from all devices support8Docs954e6152025-09-26 20:35
• Keystack own OAuth client1Docs4f0065c2025-09-26 16:55
• Token introspection endpoint2Docs51628592025-09-26 16:37
• Fix OAuth abort signal usage and OpenAPI spec22Docs373417d2025-09-26 16:28
• Add user enabled flag and user blocking feature211Docs59b166c2025-09-25 20:40
• Implement oauth authorization code flow23Docs68b62562025-09-24 23:59
• Add name and trusted flag to OAuth clients412Docscaa86d22025-09-24 17:09
• OAuth client management7Docsdc24fe72025-09-24 15:31
• User management6Docsff6118e2025-09-23 20:18
• Key management5Docs12d62ae2025-09-23 18:24
• Support more JWT signing algorithms1Docs089475a2025-09-22 23:28
• User sign-in, details and password change + JWKS infrastructureDocsa1064a62025-09-22 15:55

Revisions go back to the API's first capture.