Kaeso 0.3.7

Single sign-on starts only after the email, managed accounts open every organization, and the gateway closes several security gaps.

Highlights

• Organization sign-in links removed. Single sign-on starts only after the email, so a planted link can no longer sign a signed-out browser in to another account. #319
• Sessions end with their connection. Changing or deleting an SSO connection, or unlinking an account, ends the sessions it signed in, and a revoked session stops at once. #320, #322
• Nested requests no longer crash. A deeply nested model API request gets 400 instead of aborting the whole gateway, which had dropped every organization's requests and streams. #326
• Managed accounts sign in everywhere. An SSO sign-in from the managing organization opens all of the person's organizations, and that provider owns the account's address. #337, #339
• Edge Caddy rebuilt for HTTP/2. The edge and console run a Caddy built with Go 1.26.9 and x/net 0.60.0, which fix six HTTP/2 vulnerabilities. #342

Breaking

• Organization start links are removed and sign-in starts after the email, so point links and bookmarks at /sign-in instead. #319
• A model a key may not use now answers 404 like an unknown model instead of 403, so clients that match on 403 must change. #334
• Metrics listen on loopback by default, so a scraper on another host needs metrics_listen set to a reachable address. #335
• compose.yaml changed beyond its image versions, so install the release's file by hand and run Compose from the install's folder. #342, #343
• A reverse proxy of your own is trusted only when named in the trusted proxies setting, since the default trusts loopback and the edge network. #344

Contributors: @dvnold

Full changelog · v0.3.6...v0.3.7