Skip to content

v0.6.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Sep 18:46
· 30 commits to main since this release
v0.6.0
e9a0edb

Highlights

  • Added delegated login for embedding applications. Restricted sites can use short-lived, single-use sign-in tokens and per-site sessions. Configurable frame ancestors, apex redirects, and Caddy on-demand TLS checks support embedded deployments. (#22)
  • Added PUT /api/sites/{name}/access to update a site's access policy without redeploying, GET /api/sites/visible, and access rules in site listings. (#22)
  • Site updates that omit _access.json now preserve the stored access policy. Use spot deploy --replace-access, preserve_access=false, or Clear in the web deployer to remove it. (#22)
  • Site hosts now serve uploads only for their own site; the apex can still serve uploads across sites. (#22)
  • Formatted storage usage on the stats page and kept the homepage GitHub link aligned with the other header actions. (#21)

Configuration notes

Delegated login uses SPOT_LOGIN_URL; the login application must copy the redirect's state into the token's state claim. It requires HTTPS or *.localhost. SPOT_FRAME_ANCESTORS and SPOT_APEX_REDIRECT_URL are optional. See the README for setup details.

Images

docker pull ghcr.io/melonamin/spot-api:0.6.0
docker pull ghcr.io/melonamin/spot-caddy:0.6.0

See the changelog for the full list of changes.

Assets 2
Loading