- clear password on login, see #29
- fixed prevention of sending
Authorization
header with cross-origin requests - added Ember.SimpleAuth.crossOriginWhitelist to also sent
Authorization
header with configured cross-origin requests
- use session cookies to store the session properties (see #30)
- added API docs
- fixed #21
- made the library compliant to RFC 6749
- added the application route mixin with
login
,logout
,loginSucceeded
,loginFailed
actions - added callbacks for use with external OpenID/OAuth providers
- more examples
- added automatic token refreshing
- changed header to standard
Authorization
instead of the custom header, see #15
- fixed content type of
POST /session
request to be application/json, see #13
initial release