Bug Fixes 4

• Apply custom request headers from environment variable in proxy (#12144, #12125)

  The proxy middleware now correctly applies `CUSTOM_REQUEST_HEADERS` to rewritten requests, fixing instance resolution when using internal service URLs.

  login-v2
• Redirect to email verification when forced MFA has no visible factors (#12060, #11536)

  Detects when forced MFA has no visible factors (e.g., Email OTP requires prior verification) and redirects the user to the verification screen instead of showing an empty setup page.

  login-v2
• Retry logic for session creation after registration on NotFound errors (#12189, #12173)

  Introduces retry logic with backoff for session creation during the registration flow to mitigate race conditions where backend projections (NotFound errors) are not yet up to date.

  login-v2
• Update dependencies and fix security vulnerabilities (#12216)

  Updated npm and JS dependencies across the repository to resolve known vulnerabilities.

  console login-v2 docs

Contributors 2