--------------------------
Features
~~~~~~~~
- Changing the phone number via the API now keeps track of previous phone
numbers used by the user to comply with ISP legal requirements
Changes
~~~~~~~
- Obtain Auth Token View API endpoint: added ``is_active`` attribute to
response
- Obtain Auth Token View API endpoint: if the user attempting to
authenticate is inactive, the API will return HTTP status code 401 along
with the auth token and ``is_active`` attribute
- Validate Auth Token View API endpoint: added ``is_active``,
``phone_number`` and ``email`` to response data
- When changing phone number, user is flagged as inactive only after the
phone token is created and sent successfully
- All API endpoints related to phone token and SMS sending are now
disabled (return 403 HTTP response) if SMS verification not enabled at
organization level
Bugfixes
~~~~~~~~
- Removed ``static()`` call from media assets
- Fixed password reset for inactive users
- Fixed default password reset URL value and added docs
- Documentation: fixed several broken internal links