Changelong:

• Added automatic plaintext mail generation.

• Added better mimetype sniffing support [#351].

• Removed OnUserBeforeOauth2Register and OnUserAfterOauth2Register event hooks. This is preparations for other changes planned in the future to simplify the authentication api. If you need to listen for OAuth2 sign ups you can use the OnModelBeforeCreate and OnModelAfterCreate hooks with the new ExternalAuth model.

• Added 3 new user hook events:

  • OnUserListExternalAuths
  • OnUserBeforeUnlinkExternalAuthRequest
  • OnUserAfterUnlinkExternalAuthRequest

• Added 2 new endpoints to list and unlink the external user auths:

  • GET /api/users/:id/external-auths
  • DELETE /api/users/:id/external-auths/:provider

  The SDKs are updated accordingly with client.users.listExternalAuths() and client.users.unlinkExternalAuth() methods.

• Implented external auth linking based on the OAuth2 account ID [#276]. This now allow us to integrate with OAuth2 providers that doesn't return an email address.

  You can also unlink the user external auth relation from the Admin UI:

• Added Discord OAuth2 provider [#335] (thanks @karashiiro).

• Added Twitter OAuth2 provider [#118] (thanks @thomasdseao).

• Replaced the MX email domain check with plain email format validator to allow usage in restricted network environments [#298], [#152] (depending on the users feedback, we can reintroduce the MX email domain validator as a global option in a future release).

• Other minor improvements and optimizations.