Skip to main content

8.9.0 - Auth hardening and edit modal improvements

What's new​

Auth hardening​

A sizable security pass landed across the login and signup flows:

  • Password history tracks the 10 most recent passwords and blocks reuse.
  • Account lockout protects against repeated password-reset attempts.
  • The signup flow verifies the email address before confirming whether it is already in use, preventing user enumeration.
  • The login page shows a hint for the most recently used login method for your email.
  • If you log in with a password, Jetstream offers to remember the email so the form auto-fills next time.

Password reset improvements​

The reset flow now writes the new password into password history, shows the strength meter during reset, keeps reuse errors visible instead of bouncing back to login, and pre-fills the email field after a successful reset.

Edit/Create/Clone record modal: View All​

The record modal now exposes every field on the object, not just the ones on the user's page layout. This matches the View All behavior in the query results grid.

Team role restrictions​

Billing-only members cannot change another user's role to admin, and cannot modify users who are already administrators.

Quality-of-life​

  • Org popover width was corrected so long org names no longer overflow.
  • Expired-org reminder emails now skip inactive users.