Release v2.16.0
Added
Cratis:AuthProxy:Logout:AdditionalCookies— a list of additional cookies the session-termination sweep deletes on top of the cookies AuthProxy issues itself. Each entry names a cookie exactly (Name) and may carry theDomainit was scoped to (e.g..cratis.studio); when set, the deletion is issued for that domain as well as the request host, which is what it takes to kill a cookie another proxy scoped to a parent domain. Deletions go out withPath=/and theSecureattribute mirroring the request scheme, and happen on the logout endpoint (both legs of a full-chain logout) and on the sign-in sweep when a provider callback completes — so a fresh sign-in also heals a browser still carrying the stale cookie.
🤖 Generated with Claude Code