AWS Cognito Laravel Package Changelog
[!NOTE]
Last Updated: 2026-08-31
- Feat: Issue #133 Resolved minor bugs and improved code stability.
- Feat: Add PHPUnit unit/feature/exception tests, including console command coverage.
- Feat: Add Testbench workbench scaffolding.
- Feat: PHPUnit configuration to run package tests and Coverage using GitHub Actions.
- Refactor: Cognito client traits into dedicated Manage Action traits.
- Doc: Update related docs and CI configs.
- Feat: Issue #143 Code refactoring and optimization for better performance and maintainability.
- Feat: Added support for additional AWS Cognito features and configurations.
- Feat: Issue #142 Stability release. Improved error handling and logging for better debugging and monitoring.
- Feat: PR #140
- Feat: Added self-registration configuration for users.
- Fix: Issue #145 Code smells and minor bug fixes across various components and scripts.
- Doc: Issue #144 Clean and Update the documentation structure.
- Feat: Issue #139
- Feat: Add new components and scripts for FIDO2 Security Keys OR Passkey based MFA functionality.
- Feat: Implemented Device Management and Authentication flow as blade component.
- Feat: Implemented the scripts to handle BigInt and its operations.
- Feat: Implemented the ability to handle all challenge response components.
- Refactor: Updated the user interface to include options for FIDO2 MFA during login and registration flows.
- Doc: Update readme with FIDO2 MFA configuration instructions and details.
- Feat: Issue #132
- Feat: Implement the SRP Protocol based authentication and routes for api and web guards.
- Fix: Refactor of the authentication flow to centralise challenge handling and parameterise status messages.
- Refactor: Centralized the initiateAuth and secret-hash injection across auth calls.
- Doc: Update readme with SRP authentication instructions and details.
- Feat: Issue #135
- Feat: Issue #136
- Feat: Add new traits (ManagesPasskey, ManagesRegistration, ManagesSubject, CognitoAuthenticatable) to persist is_webauthn_enabled, register_type, registered_at, and sub (subject key) on the user model.
- Fix: Refactor of RegistersUsers/RegisterController to centralise local-user creation, raise pre/post registration events, and parameterise status messages for register vs. invite flows.
- Feat: WebAuthPasskey::complete/delete now toggle is_webauthn_enabled on the user, fire a new PostPasskeyCompleteEvent.
- Feat: The home view/nav menu gain passkey-delete UI; all event constructors gain Log::debug calls and many files get a license header.
- Fix: Issue #124
- Feat: FIDO2/Passkey support for AWS Cognito client configuration
- Feat: Implemented the registration flow with verification and resending verification code.
- Feat: Updated the user registration flow to handle both web and API routes, including appropriate validation and error handling.
- Refactor: Improved the user registration process to ensure better security and user experience, including handling edge cases and providing clear feedback to users.
- Refactor: Updated the MFA challenge handling to accommodate the new registration flow and ensure seamless integration with existing authentication processes. This will also enable future enhancements for authentication challenge flows.
- Refactor: Added enumerations for Authentication Types and Challenge Types to improve code readability and maintainability across the authentication logic.
- Fix: Addressed issues with the registration flow, including handling of edge cases and ensuring proper validation of user input to prevent errors during the registration process.
- Fix: Updated the exception handling in the registration flow to provide clearer error messages and improve debugging capabilities for developers integrating with AWS Cognito.
- Fix: Lint and code quality improvements across the registration and authentication logic to enhance maintainability and reduce potential bugs in future updates. SonarCloud code compliance improvements were also made to ensure adherence to best practices and coding standards.
- Docs: Added readme with FIDO2/Passkey configuration instructions
- Docs: Updated readme
- Feat: Issue #129
- Feat: Added new enums for Cognito user statuses and auth flows; expanded challenge enum usage across guards/middleware/client.
- Feat: Implemented a web-based “Invite User” flow (routes, controller wiring, nav link, and Blade views/components).
- Fix: Refactored exception handling to centralize JSON vs web redirect response building.
- Docs: Update readme
- Fix: Issue #127
- Fix: Weak encryption in php-jwt (CVE-2025-45769)
- Feat: Issue #70 Add web views as partials
- Feat: Preconfigured routes and controllers for Web and API
- Docs: Updated readme
- Fix: Remove Laravel version debug log by @aaronhuisinga in PR #123
- Fix: PHP 8.4 implicit nullable parameter deprecations by @joshkautz in PR #122
- Fix: update the support email address
- Feat: Support for Laravel 11 and Laravel 12
- Feat: Add registration type (invite, register) flow
- Feat: Update the user email verification at first login flow
- Fix: Issue #109
- Fix: Issue #110
- Fix: Issue #113
- Fix: Issue #114, Crash in CognitoTokenGuard for NEW_PASSWORD_REQUIRED challenge
- Feat: Issue #50, Architecture change to map the local and cognito users with sub (SubjectId)
- Fix: Issue #86, SSO enabled the user is now created for both guards
- Fix: Code optimization
- Fix: AWS JWT Token validation timeout
- Fix: Non declared variable references
- Fix: Sonar cloud code compliance
- Feat: AWS JWT Token validation
- Fix: Update the QR library for MFA. The Google Fonts library was depricated.
- Fix: Password validation for special characters
- Fix: Issue #81 (Anonymous migrations issue in laravel)
- Feat: Add sub (cognito uuid) column to user table, and fill during registration.
- Feat: Provision for user defined passwords.
- Feat: Password validation based on Cognito Configuration
- Fix: Issue #67
- Minor updates to code document and removal of log statement
- Minor updates to code document and removal of log statement
- Fix composer alias to 1.0-dev
- Fix composer alias
- Doc: Update Readme
- Feature: MFA implementation with Software Token and SMS
- Feature: MFA implementation with Software Token
- Feature: Forced signout with RefreshToken revoked.
- Feature: Sign Out / Logout of the Access Token from AWS Cognito
- Feature: Refresh Token method added to the API storage
- Fix: Issue 49 (error with reset passwords expecting json value)
- Feature: Added the cognito claim (AccessToken and RefreshToken) to the session parameter.
- Feature: Add user to the Cognito Group
- Feature: Get all the user’s groups in cognito
- Fix: Exception handling of the local user creation in Laravel 9.x
- Fix: No Token Exception at Web Login
- Fix: Issue 28 (security issue in middleware)
- Feature: Support for Cognito configuration, where Client Secret is disabled
- Feature: New User email suppress feature using message action configuration
- Feature: New User auto verification of email address is made configurable
- Fix: Modified the exception handling for authentication to show AWS Cognito errors
- Fix: Exception handling in forgot password for non-cognito users
- Feature: Forgot password RESEND option