This patch release improves Manager SSO reliability and safety in multisite environments.
Fixed
- Fixed Manager SSO endpoint resolution when
friendly_url_suffixis configured. - Fixed cross-domain Manager login and logout propagation for sites running in offline mode.
- Prevented Manager tree rendering errors when sCommerce root category resources are not configured.
- Removed raw Laravel and native PHP session identifiers from SSO diagnostic logs.
Improved
- Manager SSO now consistently uses Laravel and native PHP session identifiers together with the Manager user ID.
- Logout propagation starts correctly after the local Manager session is destroyed and the login form is rendered.
- SSO routes are handled before the frontend parser can return the offline-site response.
- Diagnostic logging retains useful run, host, step-count, user, and local-login information without exposing active session IDs.
Validation
- Cross-domain Manager login was verified on disabled/offline multisite domains.
- Cross-domain logout was verified for both Evolution and Laravel session cookies.
- All package PHP files passed syntax validation with PHP 8.4.
- Composer package metadata passed validation.
- SSO token parsing and run-plan persistence checks passed.
Upgrade Notes
No database migrations or configuration changes are required.
The package uses tag-derived versioning, so no source-level version bump is necessary before creating the v1.1.6 tag.