0.6.1

• [BREAKING] All factory properties that previously had a "Factory" suffix
  have been renamed to not include the suffix anymore. If you're currently
  setting storeFactory or authorizerFactory in the configuration be sure to
  change these to store and authorizer. Also change authenticatorFactory
  in the login controller to authenticator.
• The file names of the download distribution have been changed to have the
  "ember-" prefix again.

0.6.0

• [BREAKING] Ember Simple Auth's SimpleAuth object is no longer attached to the Ember global but is now a global itself (in the browserified distribution that exports that global). When you were referring to e.g. Ember.SimpleAuth.ApplicationRouteMixin you now have to change that to just SimpleAuth.ApplicationRouteMixin.
• [BREAKING] The "namespace" for all components that Ember Simple Auth registers in Ember's container has been changed from 'ember-simple-auth-' to just 'simple-auth-'.
• [BREAKING] The names of the distributed files has changed from "ember-simple-auth-…" to "simple-auth-…".
• [BREAKING] The requirement for defining an initializer and call SimpleAuth.setup in that has been dropped. Ember Simple Auth will now setup itself once it is loaded. Existing Ember Simple Auth initializers should be removed.
• [BREAKING] As SimpleAuth.setup was removed there now is a new way to configure Ember Simple Auth. Instead of passing configuration values to the setup method, these values are now defined on window.ENV['simple-auth'](and window.ENV['simple-auth-oauth'] etc. for the extension libraries). See the API Docs for Configuration for more information.
• [BREAKING] All underscores have been replaced with dashes in filenames. This only affects users that were using the AMD build.
• [BREAKING] The AMD builds are no longer distributed in the 'amd/' subfolder but in the root level along with the browserified versions.
• The ApplicationRouteMixin now subscribes to the session's events in the beforeModel method, see #199.
• Added documentation on how to disable server sessions when using the Devise extension library, see #204.
• The authorizer will not be used if it is destroyed already, see #191.
• The check for cross origin requests has been simplified, see #190.
• Most of the examples in the READMEs and API docs have been rewritten to focus on Ember CLI and ES6 modules instead of the browserified distribution.
• The cookie store example now implements "remember me" functionality.
• There is a new example that uses the AMD distribution.

0.5.3

• Cleaned up the AMD structure so it can better be used with ember-cli, see #189 (all files export the default export now).
• Fixed the AMD build so it does not depend on the Ember.SimpleAuth global, see #183.
• Added an example for the devise extension library, see #188.

0.5.2

• The ApplicationRouteMixin now uses the configured session property name, see #184.
• The ApplicationRouteMixin will not try to invalidate a session that is not authenticated and thus cannot be invalidated, see #185.

0.5.1

• The OAuth 2.0 authenticator does not schedule automatic token refreshs in the test environment anymore, see #181.

0.5.0

• Using any of the mixins is now completely optional; Ember.SimpleAuth will
  work without the mixins as well (see example 9).
• The session's authorizationFailed event will now be triggered for any
  failed XHRs and not only for those made in routes' model hooks.
• Fixed the Devise authenticator's restore method, see #171
• The AuthenticationControllerMixin's authenticate action now returns the
  promise that's returned from the session's authenticate action.
• The authenticator's 'updated' event was renamed to 'sessionDataUpdated'.
• The store's 'updated' event was renamed to 'sessionDataUpdated'.
• The API docs now include the events an object might trigger.
• The tests now run with the latest Ember and jQuery versions.

0.4.0

• [BREAKING] Ember.SimpleAuth's factories are now registered with
  "namespaced" names with Ember's container to avoid conflicts, see #159;
  this requires all references to these factories (e.g.
  authenticatorFactory in controllers to be prepended with
  'ember-simple-auth-').
• [BREAKING] Ember.SimpleAuth.Authorizers.Devise now sends the user's
  token and email address in one header that's compatible to
  Rails' token auth module
• [BREAKING] Ember.SimpleAuth.Authenticators.Devise now sends the
  (configurable) resource name for session authentication, see #157
• The name of the property that Ember.SimpleAuth injects the session with into
  routes and controllers can now be customized, see #159
• fixed Ember.SimpleAuth.Utils.isSecureUrl so that it checks the passed URL
  not the current location
• improved the instructions for server side setup for ember-simple-auth-devise,
  see #155

0.3.1

• Fixed a bug where the arguments from session events were not passed to router
  actions.

0.3.0

Ember.SimpleAuth has been split up into a base library and a set of extension libraries - the OAuth 2.0 authenticator/authorizer, the cookie session store as well as the new Devise authenticator/authorizer now reside in their own extension libraries so everybody can include only what they need. If you're currently using the OAuth 2.0 authenticator and/or authorizer, you now need to include the ember-simple-auth-oauth2.js file in your app! If you're using the Cookie store you need to include ember-simple-auth-cookie-store.js.

Also using an authorizer is now optional; if none is specified no requests will be authorized. If you're currently using an authorized be sure to specify it for Ember.SimpleAuth.setup now, e.g.:

Ember.SimpleAuth.setup(container, application, {
  authorizerFactory: 'authorizer:oauth2-bearer'
});

Other changes in this release:

• the new Devise authenticator and authorizer have been added, see README in the package.
• the session is no longer injected into models and views - it was probably not working for both for some time anyway and it was also not a good idea to do it in the first place as anything related to the session should be managed by the routes and controllers; see #122.
• the authenticator's update event is now handled correctly so that it might lead to the session being invalidated, see #121.
• examples have been updated
• the OAuth 2.0 authenticator will now try to refresh an expired token on refresh and only reject when that fails, see #102

0.2.1

• removed check for identification and password being present in LoginControllerMixin so an error is triggered with the server's response, see #130
• serve both examples and tests with grunt dev_server task
• README improvements
• improved examples