Skip to content

Haydi 1.2.1

Choose a tag to compare

@raicem raicem released this 20 Aug 07:11
· 4 commits to trunk since this release
8b1843a

Security release.

  • The REST and MCP API (/wp-json/haydi/v1/*) now requires a valid Bearer token on every request; the fallback to logged-in-user capability checks has been removed. Provision a token from the Haydi settings page to use the API.
  • Haydi's admin page, audit log, and chat access default back to Administrators only (manage_options). Sites that want to grant access to other roles can use the haydi_access_capability filter; the Editor model restriction setting is preserved.