MemberAuth changelog

1.8.0
- Reworked Setup into four contained cards that mirror Join It: create an App Key, enter its key and secret, generate an Access Token, then connect. Existing credential handling and connected-site actions are unchanged.
- Added Protected Page Visibility under Member Access for explicit classic-menu and native block Navigation links.
- Hide mode now shows those links to qualifying members with a valid provider-bound session and unexpired cached verification, without calling Join It while rendering navigation.
- New installations default to showing protected navigation links; existing installations with an implicit setting retain the previous hidden behavior.
- Navigation discoverability does not change direct content, search, feed, archive, REST, or sitemap authorization and exclusion boundaries.
- Added a dedicated plain-text login button label to the Logged Out message card; the Join It login action and return destination stay fixed.
- Made Member Messages the sole editor for login-button wording. A meaningful 1.7.0 design label is copied to its Customize mode without changing saved Title or Message values.

1.7.0
- Session-bound Join It authorization prevents linked WordPress password sessions from inheriting member access.
- Join It authenticated-email assurance is represented as a documented provider contract rather than a fabricated response claim.
- Privacy, uninstall, object capabilities, URL validation, Multisite handling, accessibility, localization, setup, Login Page, Member Access, messages, and troubleshooting were hardened for public release.

1.6.1
- Fixed responsive containment and document flow for the Member Messages editor and preview.

1.6.0
- Added the shared responsive administration design system and reorganized Member Screen Design, Member Messages, and Advanced Settings.

1.5.0
- Added page-first Protect Pages/View Rules and explicit Protected — No Members Yet access with schema 1.1.0.

1.4.0
- Replaced the dashboard/wizard with one-page Setup and simplified Member Access while preserving existing data.

1.3.0
- Combined rule and Page assignment management with guarded repair, duplication, toggle, and deletion flows.

1.2.0
- Added guided Page access, safe private-browser testing guidance, member logout screen, messages, appearance, logs, and troubleshooting improvements.

1.1.0
- Simplified Setup and credential state, retained safe incognito testing, and added guided content protection.

1.0.4
- Added explicit credential configured/verified states and generation-bound organization credential verification.

1.0.3
- Added sanitized authentication diagnostics and the two-stage same-site WordPress session handoff.

1.0.2
- Removed member-login testing from wp-admin and added safe private-browser instructions.

1.0.1
- Fixed wizard state and improved post-OAuth WordPress session diagnostics.

1.0.0
- Initial release candidate.
