Skip to content

9.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Jun 15:37
9.4.1
833a638
This commit was signed with the committer’s verified signature. The key has expired.
ujibang Andrea Di Cesare
GPG key ID: 7BA1A9E22D2D1BA1
Expired
Verified
Learn about vigilant mode.

RESTHeart 9.4.1

This release focuses on the restheart-accounts module, with improvements to OAuth handling, the invite workflow, and extensibility through new SPIs.

OAuth & Authentication

  • OAuth state tokens now persisted in MongoDB, replacing in-memory storage for more reliable state management across restarts and clustered deployments. Introduced thin registry interfaces as part of this change.
  • Added priority to oauthService and a dummy SMTP configuration for easier out-of-the-box setup.

Extensibility (SPI)

  • New MembershipProvider SPI to support custom membership models, letting you plug in your own logic for how users belong to teams/tenants.
  • Added the accounts membership SPI and moved the accounts SPIs into the commons module for better reuse.

Invite Workflow

  • Cleaned up the invite workflow and fixed incorrect HTTP status codes.
  • Simplified second-team setup by deleting the user first.

Configuration Changes

  • restheart-accounts plugins are disabled by default. Enable them explicitly if your deployment relies on accounts features.
Assets 7
Loading