Skip to content

v0.14.1 - Sign-in from the dev setup

Choose a tag to compare

View all tags
@kapildev333 kapildev333 released this 07 Oct 23:55
· 75 commits to main since this release
v0.14.1
21269fd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

Patch: signing in from the README development setup (API on 8080, web dev server on 5173) now lands in the app. The magic-link confirmation page allowed form submissions to its own origin only, and the browser applied that rule to the redirect into the web app, so users stayed on the confirmation page with a session already set. Single-origin deployments were unaffected.

What's Changed

Changes

  • P15-L1: allow the web origin in the sign-in confirm page's form-action CSP (sign-in from the README dev setup) by @kapildev333 in #130

Full Changelog: v0.14.0...v0.14.1

Contributors

kapildev333
Assets 2
Loading