# Change Log
## 2.6.1
* Fix: CVE-2022-42731: related to the possibility of registration replay attack.
  Thanks to 'SSE (Secure Systems Engineering)'

## 2.5.1
* Fix: CVE-2022-42731: related to the possibility of registration replay attack.
  Thanks to 'SSE (Secure Systems Engineering)' 

## 2.6.0
   * Adding Backup Recovery Codes (Recovery) as a method.
     Thanks to @Spitfireap for work, and  @peterthomassen for guidance.
   * Added: `RECOVERY_ITERATION` to set the number of iteration when hashing recovery token
   * Added: `MFA_ENFORCE_RECOVERY_METHOD` to enforce the user to enroll in the recovery code method once, they add any other method,
   * Added: `MFA_ALWAYS_GO_TO_LAST_METHOD` to the settings which redirects the user automatically to the last used method when logging in
   * Added: `MFA_RENAME_METHODS` to be able to rename the methods for the user.
   * Fix: Alot of CSS fixes for the example application

## 2.5.0

   * Fixed: issue in the 'Authorize' button don't show on Firefox and Chrome on iOS.
     Note: It seems Firefox doesn't support WebAuthn on iOS
   * Fixed: Support for bootstrap5
     Thanks to @ezrajrice
   * Upgraded to fido2==1.0.0
  
## 2.4.0

   * Fixed: issue in the 'Authorize' button don't show on Safari Mobile.
   * Upgrade to FIDO2 0.9.2, to fix issue with Windows 11.
   * Fixed: Minor Typos.


## 2.3.0
   * Fixed: A missing import Thanks @AndreasDickow
   * Fixed: `MFA.html` now call `{{block.super}}` for head and content blocks, thanks @mnelson4
   * Added: #55 introduced `mfa_base.html` which will be extended by `MFA.html` for better styling 

## 2.2.0
   * Added: MFA_REDIRECT_AFTER_REGISTRATION settings parameter
   * Fixed: Deprecation error for NULBooleanField

## 2.1.2
  * Fixed: Getting timestamp on Python 3.7 as ("%s") is raising an exception
  * Upgraded to FIDO 0.9.1


## 2.1.1
  * Fixed: FIDO2 version in requirements.txt file.
  
## 2.1.0
   * Added Support for Touch ID for Mac OSx and iOS 14 on Safari

## 2.0.5
  * Fixed issue in __version__

## 2.0.4
   * Fixed: Closes #30


## 2.0.3
  * Fixed: __version__ to show correct version

## 2.0.2
  * Added: A missing migration 
    thnks to @swainn

## 2.0.1
  * Fixed: issue in migration between Postgres and SQLite
    thnks to @swainn and @willingham 

## 2.0
  * Dropped support to djangp-1.8 and Python 2.7
  * Added: never-cache decorator
  * Fixes to Make Email Method More Robust 
  * Addresses several structure and style issues with TOTP and Email dialogs
  * Updated to fido2 0.8.1
    
Thanks to @swainn

## v1.9.1
   * Fixed: is_authenticated #13
   * Fixed: is_anonymous #6
    
    thanks to @d3cline,  

## v1.7
  * Better Error Management
  * Better Token recheck
## v 1.6.0
  * Fixed some issues for django>= 2.0
  * Added example app.

## v.1.5.0
  * Added id the key used to validate to the session dictionary as 'id'
## v1.4.0
  * Updated to FIDO == 0.7

## v1.3.0
  * Updated to FIDO2 == 0.6
  * Windows Hello is now supported.

## v1.2.0
 * Added:  MFA_HIDE_DISABLE setting option to disable users from deactivating their keys.
