All pull requests

Pull requests

• feat(mfa): passkey and SSO sign-ins count as MFA

  #92·bordoni opened Oct 19, 2026Owner·7/7·

  ·

  · 1.1.0

• fix(mfa): harden MFA against bypasses found in a security review

  #91·bordoni opened Oct 18, 2026Owner·6/7·

  ·

  · 1.1.0

• feat(mfa): admin tools, settings, Diagnostics and WP-CLI

  #90·bordoni opened Oct 18, 2026Owner·5/7·

  ·

  · 1.1.0

• feat(mfa): two-step verification account panel and routes

  #89·bordoni opened Oct 18, 2026Owner·4/7·

  ·

  · 1.1.0

• feat(mfa): enforce the plugin's MFA policy at sign-in

  #88·bordoni opened Oct 18, 2026Owner·3/7·

  ·

  · 1.1.0

• feat(mfa): MFA mode, policy, factor service, helpers and hooks

  #86·bordoni opened Oct 18, 2026Owner·2/7·

  ·

  · 1.1.0

• fix(mfa): read WorkOS MFA errors, call the real MFA endpoints, stop the password fallback skipping MFA

  #85·bordoni opened Oct 18, 2026Owner·1/7·

  ·

  · 1.1.0

• fix(sync): don't push or create users from placeholder emails

  area: authbug
  #81·bordoni opened Oct 17, 2026Owner·3/3·

  ·

  · 1.0.11

• feat(admin): mark a WorkOS email verified from the admin

  area: adminenhancement
  #80·bordoni opened Oct 17, 2026Owner·2/2·

  ·

  · 1.0.11

• feat(ratelimit): look up and clear sign-in lockouts from WP-CLI and the Users screen

  area: adminenhancement
  #79·bordoni opened Oct 17, 2026Owner·2/2·

  ·

  · 1.0.11
  1

• fix(sync): record failed profile pushes to WorkOS

  bug
  #78·bordoni opened Oct 17, 2026Owner·2/3·

  ·

  · 1.0.11

• feat(admin): plugin capabilities for WorkOS user management

  area: adminenhancement
  #77·bordoni opened Oct 17, 2026Owner·1/2·

  ·

  · 1.0.11
  1

• feat(ratelimit): make policies filterable and log when a limit triggers

  area: authenhancement
  #76·bordoni opened Oct 17, 2026Owner·1/2·

  ·

  · 1.0.11
  1

• fix(sync): push profile name edits to WorkOS

  bug
  #75·bordoni opened Oct 17, 2026Owner·1/3·

  ·

  · 1.0.11
  1

• feat(sync): workos_user_metadata filter and workos_sync_user_metadata() helper

  enhancement
  #74·bordoni opened Oct 17, 2026Owner·

  ·

  · 1.0.11
  1

• feat(api): public helpers for a valid access token, password reset and logout URL

  enhancement
  #73·bordoni opened Oct 17, 2026Owner·

  ·

  · 1.0.11
  1

• fix(sync): lock the first link of a WorkOS user

  area: authbug
  #72·bordoni opened Oct 17, 2026Owner·

  ·

  · 1.0.11
  1

• fix(sync): record a pending match when a pushed user's email is already in WorkOS

  area: authbug
  #71·bordoni opened Oct 17, 2026Owner·

  ·

  · 1.0.11
  1

• fix(admin): suggest --reactivate in the refused re-link notice for deactivated accounts

  #55·bordoni opened Oct 16, 2026Owner·

  ·

  · 1.0.11

• ci: run everything on Node 24

  #54·bordoni opened Oct 15, 2026Owner·

  ·

• feat(branding): extend admin branding controls with border radius, secondary button, and heading colors

  #12·vodanh1213 opened May 12, 2026Collaborator·

  ·