Repository navigation
Overview
Version 0.8.2 is a security and quality release focused on browser authentication, API hardening, test coverage, and release automation.
Browser authentication now uses short-lived, server-side sessions instead of storing Bearer tokens in cookies, improving security for production preview deployments.
Changes
- Added secure, expiring browser sessions backed by server-side state.
- Stopped storing raw Bearer tokens in browser cookies.
- Added session revocation during logout and application shutdown.
- Added bounded session storage with configurable TTL and maximum capacity.
- Improved authentication and rate limiting for verified Bearer tokens and browser sessions.
- Added extensive security tests covering authentication, scopes, sessions, rate limits, and request validation.
- Increased the CI coverage threshold from
65.5%to70%. - Updated production preview documentation to describe the new session-based authentication flow.
- Updated API and browser-session documentation.
- Updated Dependabot pull requests to target the
developbranch. - Updated package metadata and lockfile to version
0.8.2.