Skip to content

Release v22.45.0

Choose a tag to compare

@github-actions github-actions released this 01 Oct 23:21
ff980be

Changed

  • Discovery endpoints (/.cratis/commands, /.cratis/queries, /.cratis/users, /.cratis/tenants and /.cratis/identity-details/schema) were anonymous in every environment; they are now anonymous in Development and require authentication elsewhere by default, using the host's IHostEnvironment. Hosts without authentication leave them unmapped and log a warning once per host; explicitly requiring authentication fails startup. Keep the previous behavior with builder.AddCratisArc(options => options.Introspection.RequireAuthentication = false); or Cratis:Arc:Introspection:RequireAuthentication=false. RequireAuthentication remains a bool; leaving it unset selects the environment default, and Roles implies authentication. See Migrating to secure defaults and supported configuration binding. (#2834)