This release of the LoginRadius Core API introduces new features, improvements, and a bug fix.

Changelog

Added

• HTTP Mailer Support: Added support for configuring HTTP Mailer under the email and SMS provider settings, aligning it with the custom text SMS provider experience.

• Passwordless API Registration: Added APIs that combine passwordless registration and login in a single step. If a user is not registered, the API registers the user and triggers a passwordless OTP or magic link.

• Referrer-Policy Header Support: Added support for the Referrer-Policy header on IDX routes. Configuration changes can currently be requested through LoginRadius Support.

• OIDC and OAuth App Differentiation: Added app-type differentiation during application creation based on the selected scopes, such as the openid scope. Existing applications were also migrated.

Improved

• OAuth Refresh Token Errors: Improved refresh token API error responses with categorized, detailed reasons instead of a generic “invalid token” message.

Fixed

• Custom Field Validation: Fixed an issue that allowed unsupported characters, including dots (.), in custom field names. The API now rejects these characters to prevent database-level unique-index creation errors.

Please reach out to LoginRadius Support for any further queries.