Skip to content

Release v22.119.0

Choose a tag to compare

@github-actions github-actions released this 18 Oct 00:13
910f0a6

Added

  • ArcOptions.QueryHealth (QueryHealthOptions with RequireAuthentication and Roles, bound from Cratis:Arc:QueryHealth) controls who may observe query health. (#2873)

Changed

  • The query health endpoint (QueryHealth.ObserveHealth) now requires an authenticated user outside Development, over HTTP and both observable-query hub transports. It stays anonymous in Development. Set Cratis:Arc:QueryHealth:RequireAuthentication to false to keep it anonymous everywhere, or set Roles to restrict it further. (#2873)

Security

  • Query health no longer exposes per-connection user IDs and client addresses to anonymous callers outside Development. (#2873)