Skip to content

0.4.0

Choose a tag to compare

View all tags
@jazzsequence jazzsequence released this 16 Jan 21:44
· 93 commits to main since this release
0.4.0
af5a123
This commit was signed with the committer’s verified signature.
jazzsequence Chris Reynolds
GPG key ID: 8B229762CB7F72CF
Verified
Learn about vigilant mode.

0.4.0 - Current Release

  • Per-User Token Storage: Machine tokens now stored per-user instead of site-wide
  • Token Encryption: AES-256-CBC encryption for database-stored tokens using WordPress salts
  • Pantheon Secrets Integration: Per-user secret keys with user ID suffix (ash_nazg_machine_token_{user_id})
  • Migration System: Backward-compatible migration from global to per-user tokens
  • Migration UI: Admin notice with progressive nag (1 week → 24 hours) and settings page migration button
  • Per-User Session Tokens: Separate session token caching per user for better audit trails
  • Security Enhancement: Better security and audit trails with individual token revocation
  • User ID Display: Prominent user ID display in settings for Pantheon Secrets setup
  • PHPUnit Tests: Comprehensive test suite for user token functionality

Full Changelog: 0.3.2...0.4.0

Assets 2
Loading