Skip to main content

9.13.0 - Clickable Name links in query results, auth hardening

What's new​

Name columns act like Id columns​

In query results, Name and relationship Name columns (for example Account.Name, Owner.Name) now render as clickable links that open the record-lookup popover, matching how Id columns already behaved. Aggregate columns and subquery child columns are skipped.

Salesforce refresh token rotation​

When Salesforce returns a new refresh token during a token refresh, Jetstream now stores it instead of continuing to use the old one.

Verification attempt limits​

OTP, email verification, and password reset tokens now expire after a set number of invalid attempts as a defense-in-depth measure. Internal password reset endpoints have additional rate limits.

Password change revokes other sessions​

Changing or removing your password from the profile page now deletes all other active sessions for your account.

Auth gate before the app loads​

Unauthenticated requests are now redirected to the login page before the app loads, avoiding a brief flash of the app for logged-out users.