Skip to content

v0.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Jul 17:40
v0.3.0
This tag was signed with the committer’s verified signature.
kclejeune Kennan LeJeune
SSH Key Fingerprint: k1P17lX3esMRf5z3cancH01QBCI7ARkKwL5uKF34Kh4
Verified
Learn about vigilant mode.
7b16182
This commit was signed with the committer’s verified signature.
kclejeune Kennan LeJeune
SSH Key Fingerprint: k1P17lX3esMRf5z3cancH01QBCI7ARkKwL5uKF34Kh4
Verified
Learn about vigilant mode.

Changelog

  • a6257da bump npm audit packages, resolve peer dep errors
  • 97afab4 feat(cli): named pins with revision retention
  • 8b29117 feat(schema): upstream registry, named pins, detach + provenance columns
  • afabcc2 feat(web): /upstreams reordering, duration TTLs, enforced sections, card polish
  • 7b16182 feat(web): nix.conf snippet toggles + admin-flagged Nix-default upstreams
  • b190ef1 feat(web): rework /upstreams editing UX
  • 5c91aa4 feat(web): upstream keys/TTLs in nix.conf snippets; mandatory trust fields
  • e30be81 feat(web): upstream trust registry, trust-tier authz, closure-safe removal, named pins, edge coherence
  • 05eaf6d feat: OIDC group-claim membership sync module
  • f99d50b feat: activation helpers and guards
  • 8cdcf94 feat: add groups, group_member, permission_grant tables
  • c000aaa feat: add nimbus gc claim namespace to attic JWTs
  • 7a5b727 feat: add user.status column (pending/active)
  • a8f4eed feat: admin-only GC token scope, restoring least-privilege API-triggered GC
  • d72f127 feat: bound token minting by effective access, full bit set
  • 612d1ca feat: creator full-control grant; grants follow rename, cleared on destroy
  • 3072993 feat: effective-access loader, route guards, audit helper
  • babac49 feat: effective-access union, scope bounding, scope options
  • 03cad2f feat: enforce effective permissions across admin UI, accept gc claim
  • dc05418 feat: grant-based dashboard visibility, admin-only nav, friendly 403 page, hide emails from non-admins
  • 30a0674 feat: groups admin UI with membership, OIDC mapping, grants
  • 8ddc9a6 feat: pending wall page and activation enforcement
  • 2e6c201 feat: per-cache access management on settings page
  • e234626 feat: per-user direct grants and membership view
  • 4ab3d5f feat: populate user status, auto-activate via OIDC group
  • dd7e115 feat: read-only root proxy endpoint with proxy-key re-signing
  • 3248757 feat: root-proxy resolution, readable-set logic, proxy keypair
  • bd097e8 feat: shared unified-endpoint card with copy fields, on overview + cache pages
  • c73755d feat: show unified proxy endpoint + public key on dashboard
  • 9323bbb feat: suspend tokens while their owner is deactivated
  • a2cdea8 feat: sync OIDC/CF-Access group claims to local groups on login
  • 401b031 feat: toast on unauthorized action instead of navigating to the error page
  • 52f7cb2 feat: token scope picker bounded by effective permissions
  • 6efb40f feat: trusted upstreams — signature verification, TTL-driven revalidation, root fallback, pull-through persistence
  • 1de3874 feat: user activation controls on users page
  • 7831ed7 fix: OIDC group sync hook never fired — better-auth hook paths are route templates
  • a5e71c1 fix: only CF Access sessions route sign-out through the Access logout
  • bedc88d fix: poll deployment version so stale tabs reload after deploys
  • de148d2 fix: subject ids containing colons were truncated in cache access form
  • 25ee76f perf: index root-proxy hash lookups, negative-cache absent paths
  • c690582 refactor+feat: permission-layer cleanup, central activation wall, access UX overhaul
  • e21f91a refactor: apply simplify review — proxy D1 efficiency, shared guards and metadata
  • 45ee09e refactor: shared grant-row helpers with full-control preset
  • 85a5e98 refactor: simplify per-cache permissions — drop cc/cq/gc from grant UIs, open cache creation, admin-only GC
  • 68f0e25 style(web): consistent max-w-6xl page width; card surfaces on /upstreams

Released by GoReleaser.

Assets 8
Loading