19 Oct 2026
Renewed API keys get their expiry reminder email again
- What was broken
- The service emails a reminder before an API key expires. After a key was renewed it still counted as already reminded, so it never got another reminder.
- What I changed
- Renewing a key now clears that mark, so the reminder goes out again before the new expiry date.
- Why it matters
- People are warned before a renewed key stops working.
see the code, #1847 ↗ (opens in a new tab)
11 Oct 2026
One user without an email no longer stops the whole directory sync
- What was broken
- The service copies users from the company directory. If even one of them, like a service account, had no email address, the whole copy failed and nobody was added or updated, on every run.
- What I changed
- Users without an email are now skipped with a warning, and everyone else is copied.
- Why it matters
- One odd account can't keep everyone else from getting access.
see the code, #1835 ↗ (opens in a new tab)
11 Oct 2026
People removed from the directory now lose access in connected apps
- What was broken
- When a person was removed from the company directory, the service turned off their account. But the apps kept in sync never heard, so the person stayed active there.
- What I changed
- Turning off an account this way now marks it as changed, so the next sync sends it.
- Why it matters
- Someone who leaves loses access in the connected apps too, not only in the sign-in service.
see the code, #1834 ↗ (opens in a new tab)
10 Oct 2026
Removing someone from a group now reaches connected apps
- What was broken
- When an admin removed a user from a group on the user's page, the apps kept in sync with the service were never told. The user stayed in that group there.
- What I changed
- Saving a user's groups now marks the groups they left as changed too, so the next sync sends them.
- Why it matters
- When someone's access is taken away, it is taken away in the connected apps as well.
see the code, #1830 ↗ (opens in a new tab)
10 Oct 2026
Long ID numbers now arrive with every digit intact
- What was broken
- Admins can attach extra details to users, like a Discord ID. Long numbers came out with the last digits wrong, and 1000000 came out as "1e+06", which some apps rejected.
- What I changed
- The sign-in service now keeps whole numbers exactly as they were saved.
- Why it matters
- Apps that rely on those details, for example to match a Discord account, get the right value.
see the code, #1829 ↗ (opens in a new tab)
← every project