Navigation

JavaScript SDK changelog

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[2.31.2] - 2025-12-02

Changed

  • Updated the challenge function to accept a custom domain for the challenge page.

[2.31.0] - 2025-09-03

Changed

  • Added channel parameter to the challenge SDK method.

[2.30.0] - 2025-09-03

Changed

  • Improved real time performance and concurrency detection.

[2.29.0] - 2025-08-29

Changed

  • Improved real time performance and concurrency detection.

[2.28.0] - 2025-08-05

Changed

  • Added new SDK method challenge to open a challenge.

[2.27.0] - 2025-07-28

Changed

  • Updated the way fingerprint hashing is handled to support more devices without requiring imports for hashing libraries.

[2.26.0] - 2025-02-18

Added

  • Added account takeover challenge redirection for standard, Rupt-hosted challenges.

[2.25.2] - 2025-01-26

Changed

  • Updated fingerprint library to 2.0.2

[2.25.1] - 2025-01-22

Changed

  • Updated fingerprint library to 2.0.1

[2.25.0] - 2025-01-17

Changed

  • Updated fingerprint library to 2.0.0
  • Exposed cookie and fingerprint parameters in the attach function.
  • Exposed cookie parameter in the getFingerprint function.

[2.24.1] - 2024-11-21

Changed

  • Changed groups.id to be optional. Added typing to include number as a valid type. Groups with undefined or null IDs will be ignored.

[2.24.0] - 2024-11-06

Added

  • getHash method to get the fingerprint hash.

[2.21.1] - 2024-10-22

Changed

  • Updated fingerprint library

[2.21.0] - 2024-10-21

Changed

  • Updated fingerprint library

[2.21.0] - 2024-10-18

Changed

  • Updated fingerprint library

[2.20.4] - 2024-10-08

Changed

  • Updated fingerprint library

[2.20.3] - 2024-10-07

Changed

  • Updated fingerprint library

[2.20.2] - 2024-10-07

Changed

  • Updated fingerprint library

[2.20.1] - 2024-10-07

Changed

  • Updated fingerprint library

[2.20.0] - 2024-10-07

Changed

  • Added fingerprinting capabilities to the JS SDK
  • Improved the accuracy of signals collected by the JS SDK with device fingerprinting

[2.19.0] - 2024-07-15

Changed

  • Reinstated on_current_device_logout callback function with a new challenge ID parameter
  • Added challenge ID to applicable logout redirects from the challenge

[2.18.0] - 2024-06-13

Changed

[2.17.0] - 2024-05-22

Added

  • Added groups support. Keyword groups can be used to specify one or more groups associated with an account.

[2.16.0] - 2024-05-13

Changed

  • Changed include_page to be true by default. This will include the page in the access (so it can be displayed in your Rupt dashboard) and will help with churn analysis.

[2.15.0] - 2024-05-08

Changed

  • Improved the accuracy of all signals collected by the JS SDK with the latest research in device fingerprinting.

[2.14.0] - 2023-12-18

Added

  • Added high entropy signals collection to JS SDK to increase accuracy by up to 20%.

[2.13.0] - 2023-10-26

Added

  • Repeat trial detection. Rupt now detects when multiple trials have been initiated on the same device. To utilize this, set the event parameter to trial_started in the attach function.
  • The Rupt challenge pages now handle redirect_urls.upgrade_url to direct users to upgrade their account or request a new trial approval if they repeat trials on the same device.

[2.11.3] - 2023-09-18

Fixed

  • Fixed a bug where URLs passed were not being encoded causing only the first parameter to be passed back to the redirect URL.

[2.11.0] - 2023-09-18

Added

  • Added a tolerance parameter to the attach function. This allows you to specify the tolerance level when enforcing account sharing protections. The value is either default, lenient or strict. The default value is default.

[2.10.1] - 2023-07-05

Added

  • Exposed a domain parameter to the attach and detach functions. This allows you to specify the domain of the Rupt API you want to use. This is useful if you're using a custom Rupt deployment.

[2.9.5] - 2023-06-26

Fixed

  • Hotfix patch to fix the attach function calling canary & on-premise API instead of the production API.

[2.9.5] - 2023-06-26

Added

  • Typescript types (index.d.ts) to the package.

[2.9.3] - 2023-06-25

Added

  • account parameter to the attach function in place of user. This is to be consistent with the rest of the SDKs and avoid confusion between what a user is and what an account is.
  • redirect_urls parameter to the attach function. This allows you to specify the redirect urls for when a user should be logged out or create a new account etc.
  • on_challenge callback. This callback is called when a user is should be challenged. This is useful if you want to implement your own challenge or prevent challenges from happening.
  • limit_config.overall_device_limit parameter to the attach function. This allows you to specify the overall device limit for the account. This replaces the limit_config.overall_limit parameter which is now deprecated. It provides better naming and is consistent with the rest of the SDKs.
  • limit_config.people_limit parameter to the attach function. This allows you to specify the people limit for the account.

Changed

  • user parameter to the attach function is now deprecated. Use account instead.
  • on_current_device_logout parameter to the attach function is now deprecated. Use redirect_urls instead.
  • limit_config.overall_limit parameter to the attach function is now deprecated. Use limit_config.overall_device_limit instead.

Removed

  • on_other_device_logout callback. This callback is no longer supported.

[2.8.3] - 2023-05-10

Fixed

  • The default suspend url (hosted by Rupt) was incorrect. This hotfix patch corrects that.

[2.8.2] - 2023-05-09

Added

  • To include the page in the access (so it can be displayed in your Rupt dashboard) you can now add include_page to the attach method parameters.

[2.7.0] - 2023-03-07

Changed

  • The package is now Rupt. (Was Sabil which is now deprecated).

[2.6.0] - 2023-01-07

Added

  • Suspended users are now redirected to the suspended_url or a Rupt hosted suspended page.

[2.5.1] - 2022-12-07

Fixed

  • Calling attach multiple times does not add multiple overlays.

[2.5.0] - 2022-10-27

Added

  • Added the ability to change the language & add your own language to the blocking dialog.

Changed

  • The internal format of the language files to reduce size of library

[2.4.4] - 2022-10-27

Fixed

  • Fixed a bug introduced by the previous version causing on_other_device_logout call to be skipped.

[2.4.2] - 2022-10-12

Added

  • Added default identity detection.

[2.4.1] - 2022-10-11

Added

  • Added identity parameter to the attach function to expose device identification apis.

[2.4.0] - 2022-09-16

Added

  • The SDK now listens to remote events if the on_current_device_logout callback is provided.

Fixed

  • Returns the proper response for the attach function (including device_id) if the show_blocking_dialog is set to false.

[2.3.0] - 2022-08-30

Added

  • The library now exports two versions: an esmodule and a commonjs.

Changed

  • Reduced size of library to ~23K.

[2.2.0] - 2022-08-29

Changed

  • Reduced size of library to ~60K.
  • Added Rupt object to window so that websites can directly import it using script tags.
  • Removed unnecessary dependencies in favor of using the open source code directly.

[2.1.0] - 2022-08-25

Changed

  • Reduced payload size by 95%.
  • Stored device id locally to allow device lookup by id.