Skip to content

Release v3.29.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Oct 00:48
v3.29.0
330fd1b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • cratis direct login, logout, status and use <tenant> provide browser-based Direct sign-in, server-side token revocation, live identity status and tenant reauthorization. Sign-in uses the public cratis-cli client with authorization code and PKCE, and discovers the issuer from Direct or accepts an explicit --issuer. (#205)
  • Direct credentials are isolated from Chronicle contexts and stored in the operating system credential manager. Unix users can explicitly choose owner-only plaintext storage with --insecure-file-store; status and logout honor each credential's recorded store without exposing tokens. (#205)
  • Direct authentication validates callback state and issuer, binds stored credentials to their issuer, serializes token refresh across processes and bounds HTTP requests. Issuers require HTTPS except for loopback development servers. (#205)
Assets 6
Loading