Skip to content

v0.30.2

Release Date: 2026-11-02

Signing out stays signed out with a single sign-in provider:

  • The sign-in page waits for a choice. With only one provider configured, such as GitHub, GET /login redirected straight to it. After signing out, an app starting a new sign-in went through to the provider, which still had its own session and remembered the person's authorization, so it returned them at once: signing out signed them straight back in. /login now shows the sign-in page, with a link per provider, and waits for a click.

Upgrade notes

  1. Expect one more click to sign in when only one provider is configured: the sign-in page shows "Continue with GitHub" instead of going to GitHub at once.
  2. To keep the redirect, set social_login.auto_select_single_provider: true. A browser that signs out is then signed straight back in while the provider's own session lasts.

An app's own sign-in buttons that start sign-in with an idp_hint, such as /bff/auth/github, still go straight to that provider: the person chose it.

See Social Login.