Fluxzero 1.208.1
1.208.1 (2026-06-16)
Bug Fixes
fix(proxy): gate namespace header handling (
462a3c8)Add FLUXZERO_PROXY_NAMESPACE_HEADER_MODE with raw, signed, and disabled modes. The default raw mode keeps existing behavior, while signed requires a valid JWT-backed namespace header and disabled rejects the namespace override header entirely.
fix(proxy): avoid caching namespace headers (
3c06c22)Do not memoize decoded namespace values by client-supplied header content. JWKS keys remain cached in JwtVerifier while arbitrary namespace/JWT values no longer grow an unbounded proxy-side cache.
fix(proxy): suppress implementation response headers (
4c0250d)Disable Jetty implementation headers and filter implementation-identifying headers from proxied runtime responses.