Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions src/routes/changelog/(entries)/2026-08-12-1.markdoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
layout: changelog
title: External CIMD URLs work across Console OAuth flows again
date: 2026-08-12
---

The Console once again supports OAuth clients whose metadata is hosted at an external Client ID Metadata Document (CIMD) URL. Consent and device authorization flows can now load URL-based client metadata directly instead of relying on the Appwrite API to resolve the URL as an application ID.

Connected applications that use external CIMD URLs also display correctly in account settings. Existing OAuth clients do not need to change their client IDs or metadata URLs.
9 changes: 9 additions & 0 deletions src/routes/changelog/(entries)/2026-08-12-2.markdoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
layout: changelog
title: Free organizations no longer become read-only because of seat limits
date: 2026-08-12
---

Starter and free-plan organizations are no longer incorrectly switched to read-only mode when their billing data reports a seat limit of zero. For plans without a seat cap, the Console now treats that value as unlimited instead of as a reached limit.

Affected organizations can create projects and invite members again without changing plans or billing settings.
13 changes: 13 additions & 0 deletions src/routes/changelog/(entries)/2026-08-12.markdoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
---
layout: changelog
title: JWTs now respect linked session expiration
date: 2026-08-12
---

JSON Web Tokens (JWTs) created from a user session now stop working as soon as that linked session expires. Previously, a JWT could remain valid until its own 15-minute expiration even after the session that created it had expired.

JWTs continue to stop working when their linked session is deleted. No changes are required in your application; this fix ensures JWT authentication consistently follows the lifetime of the originating session.

{% arrow_link href="/docs/products/auth/jwt" %}
Learn more about JWT authentication
{% /arrow_link %}
Loading