Skip to content

v0.6.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Nov 04:08
v0.6.0
0b2f00a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.6.0 (2026-11-06)

⚠ BREAKING CHANGES

  • FastAPI RequireUser refusals (unauthenticated, insufficient_role, enrollment_required, cross_site_request_blocked) answer {"error": ""} instead of {"detail": ""}. A client that reads body.detail must read body.error. They also no longer reach an application's own HTTPException handler. To change them, register a handler for GuardHTTPException.

Added

  • guard: add an organization-aware permission guard (#38) (002ecb4), closes #32
  • let verify-only resource servers require a user (#35) (d095109)

Fixed

  • answer FastAPI session guard refusals under error (#39) (76739c1)
  • keep the session cookies when a refresh fails transiently (#37) (586b933)
  • origin check whatever the SameSite setting, and no JWKS lock across the fetch (#33) (3f8e828)
  • sync the bundled adapter manifest with API 0.22.0 (5de9986)
  • sync the bundled adapter manifest with API 0.22.0 (f89c39c)
Assets 2
Loading