Skip to content

Kudzu 0.12.2 - Authentication And Permission Boundary

Choose a tag to compare

View all tags
@bunzzeok bunzzeok released this 23 Aug 07:37
· 11 commits to main since this release
v0.12.2
2440c6b

Kudzu 0.12.2 completes login, restoration, permission-aware UI, server rejection, and logout using existing application primitives.

  • Replaces the placeholder login route with a native constrained form and one application-owned async handler.
  • Restores and validates stored tokens in shared layout state, including authenticated identity and role-aware controls.
  • Proves server-enforced bearer authorization: missing tokens receive 401 and member mutations receive 403.
  • Clears invalid and logged-out sessions before native replacement navigation.
  • Keeps client conditional rendering explicitly presentation-only; protected data and actions remain server-authorized.
  • Adds no semantic primitive, compiler pass, production compiler/runtime line, runtime concept, public API, auth runtime, or server to Kudzu.
  • Keeps the static /help route at 0 B JavaScript.

The application emits 43 files totaling 123,476 raw / 45,305 aggregate gzip bytes. The maintained enhanced session ships 60,767 raw / 22,561 gzip JavaScript bytes, a +1,793 raw / +432 gzip delta from 0.12.1. Required-Chrome navigation samples have a 1.4 ms median across seven fresh profiles.

Assets 2
Loading