Skip to content

Migrating to 0.14

0.14 establishes the beta compatibility boundary. Alpha compatibility shims are intentionally not retained.

Health and lifespan

  • Replace /health with /health/live for process probes.
  • Use /health/ready for database/plugin readiness.
  • Ensure the application uses FastAPI(lifespan=auth.lifespan). Readiness is a sanitized 503 until startup completes.

Storage adapters

Custom DatabaseAdapter implementations must add async ping() plus bounded cleanup methods for expired sessions, refresh tokens, and verifications. Optional API-key and audit-log stores own their corresponding cleanup methods. Run the packaged adapter contract to verify the new surface.

JWT and passwords

  • Replace JwtAlgorithm.EDDSA / "EdDSA" with JwtAlgorithm.ED25519 / "Ed25519". Existing development tokens using the old algorithm are not supported.
  • The default minimum password length is now 12 characters.

Plugin schemas

Plugin schema declarations are executable for MongoDB and Postgres. Add a MigrationSpec to every executable plugin schema, choose a plugin_migration_mode, and run fastauth migrate --auth module:auth during production deploys. Production defaults to check and rejects automatic apply when migration safety is enabled.

Operations

  • Install auth.add_middleware(app) to receive X-Request-ID propagation and operational events.
  • Schedule auth.maintenance.run() or fastauth maintenance for explicit retention cleanup.
  • Review API stability, which applies from 0.14 onward.