It’s been a while since we’ve added an entirely new event type within AuthRocket, but today is that day. We’re pleased to make available the new session.deleted event.

As you might guess from the name, session.deleted is sent when a Session is deleted before its expiration time. Since Sessions and JWTs already include an expiration time, session.deleted is not sent upon or after Session expiry.

This greatly improves the ability to cache sessions as now a webhook for session.deleted can be used to prematurely expire the cached copy.

Similarly, for apps relying solely on issued JWTs, this new webhook can be used to populate the app’s list of invalidated sessions. To help maintain such a list, the webhook payload will include the original expiration time. This bridges the gap until the session would have expired anyway.

Related, session.deleted is now triggered for all outstanding sessions upon a successful password reset or administrative password change.

Finally, sessions may now be optionally deleted upon a user-initiated password change with the new keep_sessions argument. The default value is all which preserves existing API behavior. LoginRocket now deletes all sessions except the one being used to perform the password change.

We’re pleased to announce enhanced support in DNScaster for the domain registrar Porkbun.

One of our goals with DNScaster is to streamline DNS management as much as possible. From our beginning, that’s included the option to automatically update nameserver and glue record configurations.

Only a small number of registrars provide the necessary APIs and, happily, Porkbun recently expanded their APIs, allowing us to enable our enhanced functionality with Porkbun. Thanks, Porkbun!

This allows Porkbun-registered domains to enable automated nameserver and glue record updates, and to function as a source for custom vanity names within DNScaster.

If you’re looking for a registrar for a custom vanity domain within DNScaster, Porkbun is now a great option!