Skip to content

v1.0.1: Security Hardening Release

Choose a tag to compare

View all tags
@KayronCalloway KayronCalloway released this 18 Mar 04:21
· 202 commits to main since this release
v1.0.1
9fb924f

What's New in v1.0.1

Security Fixes

  • Authentication Required: Capsule search, list, and stats endpoints now require authentication
  • Owner-based Isolation: Users can only access their own capsules (admins can access all)
  • JWT Token Revocation: Redis-backed token revocation list for instant logout
  • Bcrypt Password Hashing: Upgraded from SHA-256/PBKDF2 to bcrypt (12 rounds)
  • Rate Limiting: Verification endpoint protected against enumeration attacks
  • Security Headers: Enhanced CSP, HSTS, X-Frame-Options, and more

Infrastructure

  • Updated Kubernetes manifests and Helm charts
  • Docker image tagged v1.0.1

SDK Updates

  • Python SDK: 1.0.1
  • TypeScript SDK: 1.0.1

Full Changelog

See commits since v1.0.0-beta for complete details.

Assets 2
Loading