March 2026 Summaries

FusionAuth 1.64.0, dubbed the Secret Shibe, introduces several enhancements, including Lambda Secrets for securely storing and accessing secret values via the Admin UI's Key Master settings, dynamic OAuth endpoint discovery, and options for email passwordless login codes alongside magic links. This update also allows users to customize page titles in Simple Themes, addressing previous limitations where default titles could be confusing. Additionally, the release addresses a number of bugs, enhancing overall functionality and user experience.

FusionAuth FGA by Permify, an open-source authorization service inspired by Google Zanzibar, provides fine-grained access control within applications as part of FusionAuth's identity platform. Users can access support through either a free community Discord channel or a paid Enterprise plan. The Discord channel offers a platform for community interaction, with active participation from maintainers and users, though response times are not guaranteed. In contrast, the Enterprise plan provides direct access to FusionAuth's engineering team, guaranteed response times, and 24/7 support, making it suitable for production environments. The choice between these options depends on the user's scale and needs, with the community option ideal for exploration and troubleshooting, and the Enterprise plan recommended for critical production deployments.

FusionAuth's Identity Pre-Verification feature addresses the challenges of traditional user registration by allowing email and phone number verification before account creation, enhancing data integrity and security. This approach helps eliminate "zombie" accounts, reduces registration spam, and improves user experience by ensuring only verified identities are stored, thus preventing duplicate accounts. It also aids in data privacy compliance by minimizing unverified personal information in the system. To implement this feature, users need FusionAuth 1.62.0, a licensed plan, configured messaging for verification, and tenant identities enabled. The process involves setting up an advanced registration form with a verification step and is supported by FusionAuth's Kickstart tool for easy setup across environments. While Identity Pre-Verification strengthens data quality and user authenticity, it does not verify real-world identity or completely prevent bots from triggering verification messages.