Skip to content

Release v2.16.0

Choose a tag to compare

@github-actions github-actions released this 11 Aug 04:17
ca824fe

Added

  • Cratis:AuthProxy:Logout:AdditionalCookies — a list of additional cookies the session-termination sweep deletes on top of the cookies AuthProxy issues itself. Each entry names a cookie exactly (Name) and may carry the Domain it was scoped to (e.g. .cratis.studio); when set, the deletion is issued for that domain as well as the request host, which is what it takes to kill a cookie another proxy scoped to a parent domain. Deletions go out with Path=/ and the Secure attribute mirroring the request scheme, and happen on the logout endpoint (both legs of a full-chain logout) and on the sign-in sweep when a provider callback completes — so a fresh sign-in also heals a browser still carrying the stale cookie.

🤖 Generated with Claude Code