Perfuse v0.1.12

New

• A public demo account. serve -demo-account user:password creates a shared viewer account and shows its username and password on the sign-in page, with a button that signs in with them. It can look at everything and change nothing; it cannot change its password or add a passkey, and each start restores it. For demonstration servers holding test data only. Try it on https://test.perfuse.health: username demo, password try-perfuse-demo.
• Limits for a FHIR endpoint open to strangers (Settings → FHIR, off by default): Writes a minute from one client (-fhir-writes-per-minute, answered 429 with Retry-After) and Most resources held (-fhir-max-resources, new resources refused with 507 while updates and deletes still work). Reads and searches are never counted.

Security

• Subscription notifications, SAML metadata fetches and SMART Health Link fetches now check the address each connection actually reaches, not only the hostname beforehand. A name that resolved to an ordinary address when checked and to a cloud metadata address when connected (DNS rebinding) was let through before; it is refused now.

Also in this release, since v0.1.11: the perfuse.health site shows the console beside the headline, images no longer slide, and cards light up on hover.