Skip to content

uBix Vault v0.2.0-beta.4

Pre-release
Pre-release

Choose a tag to compare

View all tags
@cwolsen7905 cwolsen7905 released this 29 Jul 14:59
· 101 commits to main since this release
v0.2.0-beta.4
68ddd3a

Fourth beta. Machine authentication and API hardening.

Added

  • AppRole auth method — machine clients present a stable role_id + a secret_id (stored only as a hash) to POST /v1/auth/approle/login and get a token scoped to the role's policies. Vault-compatible /v1/auth/approle/* paths.
  • Rate limiting — optional per-client token-bucket throttling (-rate-limit, chart rateLimit.*); health, metrics, and the console are exempt; over-limit → 429 + Retry-After. In-house, no new dependency.

Same posture as prior betas: minimal dependency graph (still essentially one third-party dep), strict CSP console, audited writes.

Pre-release. Not production-hardened; no external security review. For production, use HashiCorp Vault or OpenBao.

See CHANGELOG.md.

Assets 2
Loading