YouSeemLegit
Sign inStart free

Changelog

What shipped, when.

Every release that changed behavior you can see. Breaking changes get their own notice and a migration window — we have never shipped one silently and do not intend to.

September 2026

A front door worth having

The public site was rebuilt around the two audiences that actually show up: developers integrating an API, and organizations who need a login their members trust.

  • NewNew marketing site with separate developer and organization tracks, a full feature breakdown and honest pricing.
  • NewPublished API reference and a five-step quickstart with copyable examples for Next.js, Express and Django.
  • NewSecurity overview that documents what we do — and what we do not have yet.
  • NewUnified sign-in: one entry point for client accounts and platform administrators.
  • ImprovedExpanded client dashboard with analytics, a user directory, session management and a scoped audit log.
  • ImprovedExpanded admin console with cross-client metrics, client search, user support tooling and audit filtering.
August 2026

Bring your own OAuth apps

  • NewClients can supply their own Google and LinkedIn credentials so the consent screen names their company. Falls back to ours when unset.
  • ImprovedRedirect URI matching relaxed to base URL, so query parameters can be appended at runtime without re-registering.
  • FixedOAuth callbacks now preserve existing query parameters in the redirect URI instead of overwriting them — critical for clients embedding their own CSRF state.
July 2026

Custom domains

  • NewWhite-label clients can serve login from their own subdomain with a managed certificate.
  • NewApex and www are reconciled automatically with a permanent redirect.
  • ImprovedThe hosted login page now preserves query parameters through every provider, including magic links.
June 2026

Two-factor, everywhere it matters

  • NewTOTP two-factor authentication for end users, with backup codes issued at enrollment.
  • SecurityTwo-factor is now required for platform administrators rather than optional.
  • NewSigned webhook delivery — HMAC-SHA256 over the raw body.
May 2026

Migration tooling

  • NewBulk user import: up to 1,000 users per batch, de-duplicated, returning 207 with per-row errors on partial success.
  • NewMagic link authentication for members who would rather not keep a password.
  • ImprovedToken verification now returns the full profile so integrations no longer need a second lookup.
April 2026

Client accounts and branding

  • NewSelf-service client accounts with signup, sign-in, password reset and a dashboard.
  • NewBranding system: logo with a real crop and position editor, brand colors and button style.
  • NewSliding session refresh — one-hour access tokens, thirty-day refresh, rotated on every use.
  • SecurityRate limiting added to sign-in, password reset and OAuth initiation.

Want something on this list?

Feature requests from people running real memberships get priority.

Request a feature