Release v1.7.2

Release type: stable
Release line: 1.7.x
Branch: release/1.7.x

npm install @frontmcp/sdk@1.7.2

CHANGELOG

Incremental Authorization Tickets: Introduced incremental authorization tickets to enhance security by ensuring that only authenticated users can expand their access without re-login. This feature addresses GHSA-2c4g-9c8x-6m8g by providing a secure method to skip login steps when expanding app grants.
E2E Dashboard and Jobs: Added new end-to-end testing applications for dashboards and job permissions. These applications enable comprehensive testing of dashboard authentication and job/workflow permission enforcement, ensuring robust security and functionality.

Authorization Enhancements: Updated the authorization process to include incremental authorization tickets, improving the security and flexibility of user authentication and authorization flows.
Testing Infrastructure: Enhanced the testing infrastructure with new configurations and setups for end-to-end testing, providing a more reliable and comprehensive testing environment.

Security Fix: Fixed a critical security issue (GHSA-2c4g-9c8x-6m8g) where incremental authorization could be bypassed without proper authentication. Special thanks to the security team for identifying this vulnerability.

fix(auth): require a signed ticket for incremental authorization by @frontegg-david in #523
fix(transport): carry verified scopes and claims into AuthInfo by @frontegg-david in #524
fix(jobs): enforce job and workflow permissions by @frontegg-david in #525

Full Changelog: v1.7.1...v1.7.2