Changelog
New features, improvements and fixes across Ordnary's products, as they ship.
October 2026
Tuesday
-
Fixed Ordnary ID
Signing out a device only affects your own sessions #
Signing out a single device under Security now checks that the session belongs to your account before it's ended.
- A session ID that isn't yours gets the same
404as one that doesn't exist - Signing out a session that already ended is a no-op instead of an error
- A session ID that isn't yours gets the same
Saturday
-
Fixed Ordnary ID
Granting access to an app works again in Chrome and Safari #
After choosing Give access on the consent screen, the page could stay put instead of returning to the app.
Chrome and Safari apply the page's Content Security Policy (
form-action) to the redirect that follows a form submission, which blocked the last step back to the app'sredirect_uri. The consent page now allows HTTPS form targets. Every other page keepsform-action 'self'.The buttons on the consent screen also show a busy state now and ignore a second click.