2.0.0-rc.6

What's Changed

• fix: use JWTPublicKey for ECDSA token parsing by @lakhansamani in #487
• test: add missing test coverage for admin queries and edge cases by @lakhansamani in #498
• fix: respect isStrongPasswordDisabled in password validator by @lakhansamani in #488
• fix: use crypto/rand for OTP generation by @lakhansamani in #489
• fix: use constant-time comparison for admin secret by @lakhansamani in #490
• fix: add revoked user check to VerifyEmail and VerifyOTP by @lakhansamani in #491
• fix: correct boolean condition for password change in UpdateProfile by @lakhansamani in #493
• fix: add OTP expiration check in ResetPassword by @lakhansamani in #494
• fix: use zero-length slice with capacity for EmailTemplates by @lakhansamani in #496
• fix: validate roles in VerifyEmail HTTP handler by @lakhansamani in #497
• fix: correct verification request expiry logic in Login by @lakhansamani in #492
• fix: check verificationRequest.Identifier for login method in VerifyEmail by @lakhansamani in #495

Full Changelog: 2.0.0-rc.5...2.0.0-rc.6