Breaking changes
Breaking changes reference and configuration for Password Reset.
Upcoming UI and configuration considerations
Section titled “Upcoming UI and configuration considerations”No policy migration is required solely because the UI has changed: legacy rules remains supported. Custom CSS may need adjustment because field order, visibility controls, information placement, and delegated identity presentation changed. See Upgrade.
logout_endpoint_url is the destination after authentication logout, not the logout action itself. The shipped configuration now selects the bundled /pwdreset/logged_out/ page. Keep or explicitly migrate customer destinations; do not overwrite them without checking session termination and branding.
The runtime and bundled frontend must be upgraded together. New documentation does not make a separately downloaded UI compatible with an older runtime.
Earlier encryption change
Section titled “Earlier encryption change”Updated default encryption
Section titled “Updated default encryption”Default encryption has been changed. This will only affect systems where encryption is enabled.
To keep the previous implementation, ensure the environment setting:
FORTIFIED_SECRETS_IMPL = local