Skip to content

v0.2.0

Choose a tag to compare

View all tags
@franzos franzos released this 27 May 19:30
· 128 commits to master since this release
v0.2.0
2a0cf7b
This commit was signed with the committer’s verified signature. The key has expired.
franzos Franz Geffke
GPG key ID: 1B3418BA53820C4C
Expired
Verified
Learn about vigilant mode.

Added

  • OAuth 2.0 / OIDC single sign-on (Authorization Code + PKCE) with just-in-time user provisioning
  • API bearer auth via JWT (RS256/JWKS) and RFC 7662 token introspection
  • MCP endpoint (/mcp, bearer-only)
  • external_url / external_ingest_url config for deployments behind a proxy
  • Operator guide (docs/operator-guide.md)

Changed

  • Admin token is now a break-glass fallback that runs alongside OAuth/OIDC
  • OAuth requires a 32-byte master key; IdP tokens stored encrypted at rest

Full Changelog: v0.1.8...v0.2.0

Verify a download:

sha256sum -c stackpit-x86_64-unknown-linux-gnu.tar.gz.sha256

Install steps: README

Changes since v0.1.8: compare

Assets 10
Loading